PT-2022-25625 · Unknown · Online Leave Management System

Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue concerns a SQL Injection vulnerability via the "/leave system/classes/Master.php?f=delete designation" API endpoint. This allows for potential unauthorized access and...

CVE-2022-38304

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manageleavetype.php...

CVE-2022-38303

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manageleavetype.php...

CVE-2022-38303

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manageleavetype.php...

CVE-2022-38302

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/managedepartment.php...

CVE-2022-38304

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manageleavetype.php...

CVE-2022-38304

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manageleavetype.php...

CVE-2022-38302

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/managedepartment.php...

CVE-2022-38303

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manageleavetype.php...

Sql injection

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/managedepartment.php...

Sql injection

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manageleavetype.php...

Sql injection

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manageleavetype.php...

CVE-2022-38304

CVE-2022-38304 concerns Online Leave Management System v1.0 with a SQL injection vulnerability exposed via the id parameter in /maintenance/manage_leave_type.php. The issue enables injection due to improper handling of the id input, aligning with CVSS 3.1 metrics indicating high impact on confide...

CVE-2022-38304

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manageleavetype.php...

CVE-2022-38303

The CVE-2022-38303 issue affects Online Leave Management System v1.0. A SQL injection vulnerability exists in the id parameter of the /employees/manage_leave_type.php endpoint, enabling potentially unauthorized data access or modification. Root cause: improper handling/sanitization of user-suppli...

CVE-2022-38303

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manageleavetype.php...

CVE-2022-38302

The CVE-2022-38302 entry concerns Online Leave Management System v1.0 with a SQL injection flaw in /maintenance/manage_department.php, exploitable via the id parameter. The Red Hat, NVD, CVE records consistently describe a SQLi vulnerability arising from unsanitized input in that endpoint, impact...

CVE-2022-38302

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/managedepartment.php...

PT-2022-24354 · Unknown · Online Leave Management System

Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/maintenance/manage leave type.php" API endpoint. Recommendations:...

PT-2022-24352 · Unknown · Online Leave Management System

Name of the Vulnerable Software and Affected Versions: Online Leave Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/maintenance/manage department.php" API endpoint. Recommendations:...