280 matches found
Online Leave Management System SQL注入漏洞
Online Leave Management System is an online leave management system. SQL injection vulnerability exists in Online Leave Management System v1.0, which originates in /leavesystem/classes/Master.php?f=delete application lacks validation of externally entered SQL statements. An attacker could use thi...
PT-2022-25626 · Unknown · Online Leave Management System
Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue concerns a SQL Injection vulnerability via the "/leave system/classes/Master.php?f=delete application" API endpoint. This allows for potential unauthorized access and...
PT-2022-25625 · Unknown · Online Leave Management System
Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue concerns a SQL Injection vulnerability via the "/leave system/classes/Master.php?f=delete designation" API endpoint. This allows for potential unauthorized access and...
Online Leave Management System SQL注入漏洞
Online Leave Management System is an online leave management system. SQL injection vulnerability exists in Online Leave Management System v1.0, which originates in /leavesystem/classes/Master.php?f=delete designation lacks validation of external input SQL statements. An attacker could use this...
CVE-2022-38304
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manageleavetype.php...
CVE-2022-38303
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manageleavetype.php...
CVE-2022-38303
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manageleavetype.php...
CVE-2022-38302
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/managedepartment.php...
CVE-2022-38302
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/managedepartment.php...
CVE-2022-38304
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manageleavetype.php...
CVE-2022-38303
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manageleavetype.php...
CVE-2022-38304
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manageleavetype.php...
Sql injection
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manageleavetype.php...
Sql injection
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/managedepartment.php...
Sql injection
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manageleavetype.php...
CVE-2022-38304
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manageleavetype.php...
CVE-2022-38304
CVE-2022-38304 concerns Online Leave Management System v1.0 with a SQL injection vulnerability exposed via the id parameter in /maintenance/manage_leave_type.php. The issue enables injection due to improper handling of the id input, aligning with CVSS 3.1 metrics indicating high impact on confide...
CVE-2022-38303
The CVE-2022-38303 issue affects Online Leave Management System v1.0. A SQL injection vulnerability exists in the id parameter of the /employees/manage_leave_type.php endpoint, enabling potentially unauthorized data access or modification. Root cause: improper handling/sanitization of user-suppli...