Online Leave Management System Master.php?f=delete_designation SQL Injection Vulnerability

Online Leave Management System is an online leave management system. SQL injection vulnerability exists in Online Leave Management System v1.0, which originates in /leavesystem/classes/Master.php?f=delete designation lacks validation of external input SQL statements. An attacker could use this...

Online Leave Management System SQL Injection Vulnerability

Online Leave Management System is an online leave management system. SQL injection vulnerability exists in Online Leave Management System v1.0, which originates in /leavesystem/classes/Master.php?f=delete application lacks validation of externally entered SQL statements. An attacker could use thi...

CVE-2022-40927

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deletedesignation...

CVE-2022-40928

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteapplication...

CVE-2022-40926

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteleavetype...

CVE-2022-40926

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteleavetype...

CVE-2022-40928

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteapplication...

CVE-2022-40927

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deletedesignation...

Sql injection

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deletedesignation...

Sql injection

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteapplication...

Sql injection

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteleavetype...

CVE-2022-40927

CVE-2022-40927 affects Online Leave Management System v1.0. The vulnerability is a SQL Injection issue in the endpoint /leave_system/classes/Master.php?f=delete_designation caused by lack of input validation. Impact is described as potential unauthorized data access/illicit SQL execution with hig...

CVE-2022-40927

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deletedesignation...

CVE-2022-40927

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deletedesignation...

CVE-2022-40926

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteleavetype...

CVE-2022-40926

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteleavetype...

CVE-2022-40926

CVE-2022-40926 affects Online Leave Management System v1.0, with a SQL Injection flaw in the endpoint /leave_system/classes/Master.php?f=delete_leave_type caused by insufficient input validation. Multiple sources (Red Hat, CNVD, CNNVD, CVE listings) corroborate a high-severity vulnerability (CVSS...

CVE-2022-40928

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteapplication...

CVE-2022-40928

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteapplication...

CVE-2022-40928

CVE-2022-40928 affects Online Leave Management System v1.0 and is due to a SQL Injection in the endpoint "/leave_system/classes/Master.php?f=delete_application". The root cause is lack of validation/externalization of SQL statements in that API path, enabling an attacker to manipulate the databas...