CVE-2022-38303

The CVE-2022-38303 issue affects Online Leave Management System v1.0. A SQL injection vulnerability exists in the id parameter of the /employees/manage_leave_type.php endpoint, enabling potentially unauthorized data access or modification. Root cause: improper handling/sanitization of user-suppli...

CVE-2022-38302

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/managedepartment.php...

CVE-2022-38302

The CVE-2022-38302 entry concerns Online Leave Management System v1.0 with a SQL injection flaw in /maintenance/manage_department.php, exploitable via the id parameter. The Red Hat, NVD, CVE records consistently describe a SQLi vulnerability arising from unsanitized input in that endpoint, impact...

PT-2022-24353 · Unknown · Online Leave Management System

Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/employees/manage leave type.php" API endpoint. Recommendations: F...

Online Leave Management System SQL注入漏洞

Sourcecodester Online Leave Management System is an online leave management system. A security vulnerability exists in Online Leave Management System v1.0, which originates from a SQL injection vulnerability in /employees/manageleavetype.php via the id parameter...

PT-2022-24352 · Unknown · Online Leave Management System

Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/maintenance/manage department.php" API endpoint. Recommendations:...

Online Leave Management System SQL注入漏洞

Sourcecodester Online Leave Management System is an online leave management system. A security vulnerability exists in Online Leave Management System v1.0, which originates from a SQL injection vulnerability in /maintenance/manageleavetype.php via the id parameter...

PT-2022-24354 · Unknown · Online Leave Management System

Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/maintenance/manage leave type.php" API endpoint. Recommendations:...

Online Leave Management System SQL注入漏洞

Sourcecodester Online Leave Management System is an online leave management system. A security vulnerability exists in Online Leave Management System v1.0, which originates from a SQL injection vulnerability in /maintenance/managedepartment.php via the id parameter...

Online Employee Leave Management System跨站请求伪造漏洞

Online Employee Leave Management System is an employee leave management system that provides an employee and management platform to efficiently manage leave departures and approvals. The vulnerability can be exploited by attackers to disguise user identity and send malicious requests...

Online Employee Leave Management System 1.0 Cross Site Request Forgery

Exploit Title: Online Employee Leave Management System 1.0 - Cross-Site Request Forgery addemployee.php Date: 05/09/2022 Exploit Author: Amolo Hunters Software Link: https://www.sourcecodester.com/php/15374/online-employee-leave-management-system-php-free-source-code.html Version: 1.0 Tested on:...

CVE-2022-3121

A vulnerability was found in SourceCodester Online Employee Leave Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/addemployee.php. The manipulation leads to cross-site request forgery. The attack can be...

Cross site request forgery (csrf)

A vulnerability was found in SourceCodester Online Employee Leave Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/addemployee.php. The manipulation leads to cross-site request forgery. The attack can be...

CVE-2022-3121

CVE-2022-3121 affects SourceCodester Online Employee Leave Management System 1.0. The vulnerability concerns an unknown functionality in /admin/addemployee.php, where manipulation leads to cross-site request forgery (CSRF) that can be exploited remotely. Multiple connected sources (Red Hat, CVE r...

CVE-2022-3121 SourceCodester Online Employee Leave Management System addemployee.php cross-site request forgery

A vulnerability was found in SourceCodester Online Employee Leave Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/addemployee.php. The manipulation leads to cross-site request forgery. The attack can be...

Online Employee Leave Management System 跨站请求伪造漏洞

Online Employee Leave Management System is an employee leave management system that provides an employee and management platform to efficiently manage leave departures and approvals. The vulnerability can be exploited by attackers to disguise user identity and send malicious requests...

Jorani v1.0 SQL Injection Vulnerability

Jorani is a leave management system developed by Benjamin BALET, an individual developer in France. Designed to provide small organizations with a simple workflow for leave and overtime requests. Jorani v1.0 suffers from an SQL injection vulnerability that stems from a lack of valid validation in...

Jorani Cross-Site Scripting Vulnerability (CNVD-2022-58885)

Benjamin BALET Jorani is a leave management system from the French personal developer Benjamin BALET. Designed to provide small organizations with a simple workflow for leave and overtime requests, Benjamin BALET Jorani version 1.0 contains a cross-site scripting vulnerability stemming from a lac...

Jorani Cross-Site Request Forgery Vulnerability

Jorani is a leave management system. Designed to provide small organizations with a simple workflow for leave and overtime requests. A cross-site request forgery vulnerability exists in Jorani version 1.0, which stems from the /application/controllers/Users.php page not adequately verifying that ...

Joy ebike Wolf 安全漏洞

Joy ebike Wolf is an electric scooter from Joy ebike India. A security vulnerability exists in Joy ebike Wolf Manufacturing. A remote attacker could exploit the vulnerability to deny the vehicle lock button and remain unlocked...