Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.7

PHP Attendance System Allows Malicious Database Access

CVE-2026-37595
Summary

The SourceCodester Online Employees Work From Home Attendance System version 1.0 has a security weakness that allows hackers to access sensitive data in the database. This is a serious issue because it could lead to unauthorized changes to employee information and attendance records. To fix this, update the system to the latest version or seek assistance from a developer to patch the vulnerable code.

Original title
SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/manage_employee.php.
Original description
SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/manage_employee.php.
Vulnerability type
CWE-89 SQL Injection
Published: 14 Apr 2026 · Updated: 15 Apr 2026 · First seen: 14 Apr 2026