CVE-2021-44087: Attendance And Payroll System Project Attendance And Payroll System

Critical severity, CVSS 9.8. EPSS: 4.1% chance of exploitation in the next 30 days.

A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Attendance and Payroll System v1.0 which allows an unauthenticated remote attacker to upload a maliciously crafted PHP via photo upload.

Affected products

• Attendance And Payroll System Project Attendance And Payroll System: version 1.0 only

Published 2022-03-17. Last modified 2026-07-09.