Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities.Β The βsetsickleaveβ parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database.
CPE | Name | Operator | Version |
---|---|---|---|
leave_management_system | eq | 1.0 |