CVE-2022-38116: Leyan Salary Management System

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Le-yan Personnel and Salary Management System has hard-coded database account and password within the website source code. An unauthenticated remote attacker can access, modify system data or disrupt service.

Affected products

• Leyan Salary Management System: before 2022-06-06 (fixed in 2022-06-06)

Published 2022-08-30. Last modified 2026-06-17.