Lucene search
+L

8 matches found

NVD
NVD
•added 2026/09/30 4:18 a.m.•10 views

CVE-2026-102912

A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument datestart/dateend leads to sql injection. Remote exploitation of the attack is possible. The exploit i...

5.8CVSS0.00214EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/30 4:00 a.m.•16 views

CVE-2026-102912

The SourceCodester Online Leave Management System 1.0 is vulnerable to a SQL injection flaw in the /admin/?page=reports endpoint. The root cause involves improper handling of the date_start and date_end arguments, which allows for remote exploitation. The documents indicate that an exploit is pub...

5.8CVSS5.8AI score0.00214EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/30 4:00 a.m.•8 views

CVE-2026-102912 SourceCodester Online Leave Management System page reports sql injection

A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument datestart/dateend leads to sql injection. Remote exploitation of the attack is possible. The exploit i...

5.8CVSS5.8AI score0.00214EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/30 4:00 a.m.•11 views

EUVD-2026-89607

A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument datestart/dateend leads to sql injection. Remote exploitation of the attack is possible. The exploit i...

5.8CVSS5.8AI score0.00214EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/30 4:00 a.m.•30 views

CVE-2026-102912 SourceCodester Online Leave Management System page reports sql injection

A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument datestart/dateend leads to sql injection. Remote exploitation of the attack is possible. The exploit i...

5.8CVSS0.00214EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2021-27770

Malicious code in bioql PyPI...

9.8CVSS9.4AI score0.01356EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/21 8:15 p.m.•21 views

Sql injection

SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leavesystem/classes/Login.php...

7.5CVSS9.8AI score0.01356EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/21 12:00 a.m.•3 views

CVE-2021-40595: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leavesystem/classes/Login.php...

9.8CVSS6.3AI score0.01356EPSS
SaveExploits1References2
Rows per page
Query Builder