Online Leave Management System Master.php?f=delete_leave_type SQL Injection Vulnerability

Online Leave Management System is an online leave management system. SQL injection vulnerability exists in Online Leave Management System v1.0, which originates from /leavesystem/classes/Master.php?f=delete leavetype lacks validation for external input SQL statements. An attacker could use this...

Online Leave Management System Master.php?f=delete_designation SQL Injection Vulnerability

Online Leave Management System is an online leave management system. SQL injection vulnerability exists in Online Leave Management System v1.0, which originates in /leavesystem/classes/Master.php?f=delete designation lacks validation of external input SQL statements. An attacker could use this...

CVE-2022-40926

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteleavetype...

CVE-2022-40927

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deletedesignation...

CVE-2022-40926

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteleavetype...

CVE-2022-40928

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteapplication...

CVE-2022-40927

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deletedesignation...

Sql injection

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteapplication...

Sql injection

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteleavetype...

Sql injection

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deletedesignation...

CVE-2022-40927

CVE-2022-40927 affects Online Leave Management System v1.0. The vulnerability is a SQL Injection issue in the endpoint /leave_system/classes/Master.php?f=delete_designation caused by lack of input validation. Impact is described as potential unauthorized data access/illicit SQL execution with hig...

CVE-2022-40927

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deletedesignation...

CVE-2022-40927

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deletedesignation...

CVE-2022-40926

CVE-2022-40926 affects Online Leave Management System v1.0, with a SQL Injection flaw in the endpoint /leave_system/classes/Master.php?f=delete_leave_type caused by insufficient input validation. Multiple sources (Red Hat, CNVD, CNNVD, CVE listings) corroborate a high-severity vulnerability (CVSS...

CVE-2022-40926

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteleavetype...

CVE-2022-40926

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteleavetype...

CVE-2022-40928

CVE-2022-40928 affects Online Leave Management System v1.0 and is due to a SQL Injection in the endpoint "/leave_system/classes/Master.php?f=delete_application". The root cause is lack of validation/externalization of SQL statements in that API path, enabling an attacker to manipulate the databas...

CVE-2022-40928

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteapplication...

CVE-2022-40928

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteapplication...

PT-2022-25624 · Unknown · Online Leave Management System

Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue concerns a SQL Injection vulnerability via the "/leave system/classes/Master.php?f=delete leave type" API endpoint. This allows for potential exploitation. No information is...