CVE-2022-43179

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?page=user/manageuser&id=...

CVE-2022-43179

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?page=user/manageuser&id=...

CVE-2022-43179

Online Leave Management System v1.0 is affected by a SQL injection in /admin/?page=user/manage_user&id=. Root cause: unsafe construction of SQL via the id parameter leading to full access to data. CVSSv3.1 metrics indicate high impact on confidentiality, integrity, and availability (AV:N/AC:L/PR:...