CVE-2022-30931

Employee Leaves Management System ELMS V 2.1 is vulnerable to Cross Site Request Forgery CSRF via /myprofile.php...

CVE-2022-30931

CVE-2022-30931 affects Employee Leaves Management System (ELMS) version 2.1. Multiple connected sources confirm a Cross-Site Request Forgery (CSRF) vulnerability reachable via /myprofile.php, enabling an attacker to modify user profile details (e.g., username, phone number). The primary documents...

CVE-2022-30931

Employee Leaves Management System ELMS V 2.1 is vulnerable to Cross Site Request Forgery CSRF via /myprofile.php...

CVE-2022-30931: Cross-Site Request Forgery (CSRF)

Employee Leaves Management System ELMS V 2.1 is vulnerable to Cross Site Request Forgery CSRF via /myprofile.php...

PT-2022-20392

Name of the Vulnerable Software and Affected Versions Employee Leaves Management System ELMS version 2.1 Description The issue is related to Cross Site Request Forgery CSRF via the "/myprofile.php" API endpoint. This means an attacker could potentially trick a user into performing unintended...

CVE-2007-4881: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profile/myprofile.php in psi-labs.com social networking script psisns, probably 1.0, allows remote attackers to execute arbitrary SQL commands via the u parameter...