Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2026/06/09 2:59 p.m.•29 views

CVE-2026-11510

A security flaw has been discovered in CodeAstro Leave Management System 1.0. This affects an unknown part of the file /admin/addleave.php. Performing a manipulation of the argument typeofleave results in sql injection. It is possible to initiate the attack remotely. The exploit has been released...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/08 12:16 p.m.•26 views

CVE-2026-11510

A security flaw has been discovered in CodeAstro Leave Management System 1.0. This affects an unknown part of the file /admin/addleave.php. Performing a manipulation of the argument typeofleave results in sql injection. It is possible to initiate the attack remotely. The exploit has been released...

6.5CVSS0.002EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/06/08 12:00 a.m.•25 views

CodeAstro Leave Management System 注入漏洞

The CodeAstro Leave Management System is a leave management system developed by CodeAstro Inc. Version 1.0 of the CodeAstro Leave Management System has a SQL injection vulnerability, which stems from the handling of the typeofleave parameter in the file/admin/addleave.php. Attackers can launch...

6.5CVSS6.6AI score0.002EPSS
SaveExploits0References2
OSV
OSV
•added 2024/05/14 3:38 p.m.•17 views

CVE-2024-34220

Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter...

7.5CVSS5.8AI score0.0078EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•8 views

CVE-2024-34220: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter...

7.5CVSS5.8AI score0.0078EPSS
SaveExploits2References1
CVE
CVE
•added 2024/05/09 6:31 p.m.•55 views

CVE-2024-34220

The SourceCodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter in the applyleave.php file. An attacker can exploit this vulnerability to gain database privileges , potentially leading to a large-scale data breach. If the database possesses DBA pri...

7.5CVSS8.1AI score0.0078EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/05/09 12:00 a.m.•16 views

PT-2024-25750 · Sourcecodester · Sourcecodester Human Resource Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Human Resource Management System version 1.0 Description: The issue allows for SQL Injection via the leave parameter. Recommendations: For version 1.0, avoid using the leave parameter in affected API endpoints until the issue i...

7.5CVSS8.2AI score0.0078EPSS
SaveExploits2References2
Rows per page
Query Builder