CVE-2024-34833: ORETNOM23 Payroll Management System

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

Sourcecodester Payroll Management System v1.0 is vulnerable to File Upload. Users can upload images via the "save_settings" page. An unauthenticated attacker can leverage this functionality to upload a malicious PHP file instead. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as the user running the web server.

Affected products

• ORETNOM23 Payroll Management System: version 1.0 only

Published 2024-06-17. Last modified 2026-06-17.