Description (CNA)
Le-yan Personnel and Salary Management System has hard-coded database account and password within the website source code. An unauthenticated remote attacker can access, modify system data or disrupt service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Le-yan Co., Ltd. / Personnel and Salary Management System | affected unspecified through 2022/6/6 |
CWE
CWE-798
References
ADP enrichment
No English description supplied.