Lucene search
+L

104 matches found

NVD
NVD
•added 2026/09/30 4:18 a.m.•10 views

CVE-2026-102912

A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument datestart/dateend leads to sql injection. Remote exploitation of the attack is possible. The exploit i...

5.8CVSS0.00214EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/30 4:00 a.m.•34 views

CVE-2026-102912 SourceCodester Online Leave Management System page reports sql injection

A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument datestart/dateend leads to sql injection. Remote exploitation of the attack is possible. The exploit i...

5.8CVSS0.00214EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/30 4:00 a.m.•17 views

CVE-2026-102912

The SourceCodester Online Leave Management System 1.0 is vulnerable to a SQL injection flaw in the /admin/?page=reports endpoint. The root cause involves improper handling of the date_start and date_end arguments, which allows for remote exploitation. The documents indicate that an exploit is pub...

5.8CVSS5.8AI score0.00214EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/30 4:00 a.m.•9 views

CVE-2026-102912 SourceCodester Online Leave Management System page reports sql injection

A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument datestart/dateend leads to sql injection. Remote exploitation of the attack is possible. The exploit i...

5.8CVSS5.8AI score0.00214EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/30 4:00 a.m.•13 views

EUVD-2026-89607

A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument datestart/dateend leads to sql injection. Remote exploitation of the attack is possible. The exploit i...

5.8CVSS5.8AI score0.00214EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•6 views

CVE-2026-102912: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument datestart/dateend leads to sql injection. Remote exploitation of the attack is possible. The exploit i...

5.8CVSS5.8AI score0.00214EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•6 views

PT-2026-103018

A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument date start/date end leads to sql injection. Remote exploitation of the attack is possible. The exploit...

5.8CVSS5.8AI score0.00214EPSS
SaveExploits0References7
NVD
NVD
•added 2026/07/13 3:16 a.m.•22 views

CVE-2026-15523

A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLeave/admin/dashboard.php. This manipulation of the argument Name causes sql injection. The attack can be initiated remotely. The...

6.5CVSS0.00333EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•44 views

PT-2026-57810

A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component POST Handler. Performing a manipulation of the argument appid results in sql injection. The attack is possible to be...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•7 views

CVE-2026-15559: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component POST Handler. Performing a manipulation of the argument appid results in sql injection. The attack is possible to be...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•2 views

CVE-2026-15558: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLeave/admin/deletemp.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed...

6.5CVSS6.4AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•2 views

CVE-2026-15523: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLeave/admin/dashboard.php. This manipulation of the argument Name causes sql injection. The attack can be initiated remotely. The...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/09 12:00 a.m.•3 views

CVE-2026-15134: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /SimpleOnlineLeave/index.php. Executing a manipulation of the argument email can lead to sql injection. The attack may be performed from...

7.5CVSS6.9AI score0.00431EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/09 10:56 a.m.•13 views

CVE-2022-38302

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/managedepartment.php...

7.2CVSS8.3AI score0.00978EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/10/08 12:00 a.m.•16 views

SourceCodester Online Leave Management System 安全漏洞

SourceCodester Online Leave Management System is a SourceCodester open source online leave management system. A security vulnerability exists in SourceCodester Online Leave Management System version 1.0, which stems from an incorrect manipulation of the parameter employid in the file /reset.php,...

9.8CVSS7.8AI score0.00478EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2022-47933

Malicious code in bioql PyPI...

4.8CVSS5.4AI score0.00469EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-47934

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.01119EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2021-27770

Malicious code in bioql PyPI...

9.8CVSS9.4AI score0.01356EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2022-46224

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.00762EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2022-44559

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.01002EPSS
SaveExploits1References1
Rows per page
Query Builder