CVE-2022-48118

Jorani v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Acronym parameter...

CVE-2022-48118

Jorani v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Acronym parameter...

Cross site scripting

Jorani v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Acronym parameter...

CVE-2022-48118

Jorani v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Acronym parameter...

CVE-2022-34132

Jorani v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at application/controllers/Leaves.php...

Cross site scripting

Benjamin BALET Jorani v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Comment parameter at application/controllers/Leaves.php...

Sql injection

Benjamin BALET Jorani v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at application/controllers/Leaves.php...

CVE-2022-34132

CVE-2022-34132 affects Jorani v1.0, with a SQL injection vulnerability exploitable through the id parameter in application/controllers/Leaves.php. The issue is documented across multiple feeds (NVD, CNVD, OSV, RH, CNVD mirrors) as a lack of input validation enabling access to database information...

CVE-2022-34133

CVE-2022-34133 affects Benjamin BALET Jorani v1.0. The issue is a cross-site scripting (XSS) vulnerability in the Comment parameter of application/controllers/Leaves.php. Root cause cited across sources: lack of input validation/filtering and unsafe output of user-supplied data in the Comment fie...

CVE-2022-34134

Jorani v1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /application/controllers/Users.php...

CVE-2022-34133

Jorani v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the Comment parameter at application/controllers/Leaves.php...