PT-2022-22498 · Unknown · Human Resource Management System

Name of the Vulnerable Software and Affected Versions: Human Resource Management System version 1.0 Description: A problematic issue has been found in the Human Resource Management System, affecting an unknown part of the Leave Handler component. The manipulation of the Reason argument leads to...

CVE-2022-3502 Human Resource Management System Leave cross site scripting

A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects an unknown part of the component Leave Handler. The manipulation of the argument Reason leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

Unspecified vulnerability in Online Leave Management System (CNVD-2022-68288)

Online Leave Management System is an online leave management system. version v1.0 of Online Leave Management System contains a security vulnerability that stems from the existence of an arbitrary file upload vulnerability allowing an attacker to execute arbitrary code via a crafted PHP file. No...

Online Leave Management System SQL Injection Vulnerability

Online Leave Management System is an online leave management system. SQL injection vulnerability exists in Online Leave Management System v1.0, which originates in /leavesystem/classes/Master.php?f=delete department's id parameter lacks validation for external input SQL statements. An attacker...

CVE-2022-41379

An arbitrary file upload vulnerability in the component /leavesystem/classes/Users.php?f=save of Online Leave Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-41379

An arbitrary file upload vulnerability in the component /leavesystem/classes/Users.php?f=save of Online Leave Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-41379

An arbitrary file upload vulnerability in the component /leavesystem/classes/Users.php?f=save of Online Leave Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

Privilege escalation

An arbitrary file upload vulnerability in the component /leavesystem/classes/Users.php?f=save of Online Leave Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

Online Leave Management System 代码问题漏洞

Online Leave Management System is an online leave management system. version v1.0 of Online Leave Management System contains a security vulnerability that stems from the existence of an arbitrary file upload vulnerability allowing an attacker to execute arbitrary code via a crafted PHP file. No...

CVE-2022-41379

An arbitrary file upload vulnerability in the component /leavesystem/classes/Users.php?f=save of Online Leave Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

PT-2022-25830 · Unknown · Online Leave Management System

Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue concerns an arbitrary file upload vulnerability in the component /leave system/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a...

CVE-2022-41379

CVE-2022-41379 affects Online Leave Management System v1.0. The vulnerability is an arbitrary file upload in the component path /leave_system/classes/Users.php?f=save, allowing an attacker to execute arbitrary code via a crafted PHP file. The published metrics list a CVSS 3.1 base score of 7.2 (H...

CVE-2022-41355

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /leavesystem/classes/Master.php?f=deletedepartment...

CVE-2022-41355

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /leavesystem/classes/Master.php?f=deletedepartment...

CVE-2022-41355

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /leavesystem/classes/Master.php?f=deletedepartment...

Sql injection

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /leavesystem/classes/Master.php?f=deletedepartment...

CVE-2022-41355

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /leavesystem/classes/Master.php?f=deletedepartment...

Online Leave Management System SQL注入漏洞

Online Leave Management System is an online leave management system. SQL injection vulnerability exists in Online Leave Management System v1.0, which originates in /leavesystem/classes/Master.php?f=delete department's id parameter lacks validation for external input SQL statements. An attacker...

CVE-2022-41355

Online Leave Management System v1.0 contains a SQL injection vulnerability. The flaw is in the delete_department path (/Master.php?f=delete_department) where the id parameter is used in SQL statements without proper validation. This can allow an attacker to manipulate queries and potentially acce...

Online Leave Management System Master.php?f=delete_leave_type SQL Injection Vulnerability

Online Leave Management System is an online leave management system. SQL injection vulnerability exists in Online Leave Management System v1.0, which originates from /leavesystem/classes/Master.php?f=delete leavetype lacks validation for external input SQL statements. An attacker could use this...