CVE-2023-44480

The CVE-2023-44480 entry concerns Leave Management System Project v1.0 with multiple Authenticated SQL Injection vulnerabilities. The root cause is lack of input validation for the setcasualleave parameter in admin/setleaves.php, with unfiltered data sent to the database. Affected software: Leave...

CVE-2023-44482

Leave Management System Project v1.0 is affected by multiple authenticated SQL injection vulnerabilities in the admin/setleaves.php resource (setsickleave parameter) where input is not validated and sent unfiltered to the database. This CVE-2023-44482 entry has CVSS v3.1 base score 8.8 (Network, ...

CVE-2023-44481

CVE-2023-44481 affects Leave Management System Project v1.0, where the authenticated attacker can exploit SQL injection through the setearnleave parameter in admin/setleaves.php. Root cause: unvalidated/unfiltered input sent to the database. Documented impact is high (CVE metrics show high confid...