Itsourcecode Payroll Management System 1.0 is vulnerable to SQL Injection in payroll_items.php via the ID parameter.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')