CVE-2006-2982: Enterprise Payroll Systems

High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter in (1) footer.php and (2) admin/footer.php.

Affected products

• Enterprise Payroll Systems Enterprise Payroll Systems: version 1.0_alpha only; version 1.1 only; version 1.01_alpha only

Published 2006-06-13. Last modified 2026-06-16.