678 matches found
CVE-2022-40926
CVE-2022-40926 affects Online Leave Management System v1.0, with a SQL Injection flaw in the endpoint /leave_system/classes/Master.php?f=delete_leave_type caused by insufficient input validation. Multiple sources (Red Hat, CNVD, CNNVD, CVE listings) corroborate a high-severity vulnerability (CVSS...
CVE-2022-40926
Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteleavetype...
CVE-2022-40928
CVE-2022-40928 affects Online Leave Management System v1.0 and is due to a SQL Injection in the endpoint "/leave_system/classes/Master.php?f=delete_application". The root cause is lack of validation/externalization of SQL statements in that API path, enabling an attacker to manipulate the databas...
CVE-2022-40928
Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteapplication...
CVE-2022-40928
Online Leave Management System v1.0 is vulnerable to SQL Injection via /leavesystem/classes/Master.php?f=deleteapplication...
Online Leave Management System SQL注入漏洞
Online Leave Management System is an online leave management system. SQL injection vulnerability exists in Online Leave Management System v1.0, which originates in /leavesystem/classes/Master.php?f=delete application lacks validation of externally entered SQL statements. An attacker could use thi...
PT-2022-25626 · Unknown · Online Leave Management System
Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue concerns a SQL Injection vulnerability via the "/leave system/classes/Master.php?f=delete application" API endpoint. This allows for potential unauthorized access and...
Online Leave Management System SQL注入漏洞
Online Leave Management System is an online leave management system. SQL injection vulnerability exists in Online Leave Management System v1.0, which originates from /leavesystem/classes/Master.php?f=delete leavetype lacks validation for external input SQL statements. An attacker could use this...
PT-2022-25624 · Unknown · Online Leave Management System
Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue concerns a SQL Injection vulnerability via the "/leave system/classes/Master.php?f=delete leave type" API endpoint. This allows for potential exploitation. No information is...
PT-2022-25625 · Unknown · Online Leave Management System
Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue concerns a SQL Injection vulnerability via the "/leave system/classes/Master.php?f=delete designation" API endpoint. This allows for potential unauthorized access and...
Online Leave Management System SQL注入漏洞
Online Leave Management System is an online leave management system. SQL injection vulnerability exists in Online Leave Management System v1.0, which originates in /leavesystem/classes/Master.php?f=delete designation lacks validation of external input SQL statements. An attacker could use this...
CVE-2022-38304
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manageleavetype.php...
CVE-2022-38303
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manageleavetype.php...
CVE-2022-38302
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/managedepartment.php...
CVE-2022-38302
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/managedepartment.php...
CVE-2022-38303
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manageleavetype.php...
CVE-2022-38304
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manageleavetype.php...
CVE-2022-38303
Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manageleavetype.php...
