Online Leave Management System Project

12 CVEs across 1 Online Leave Management System Project products. Browse Online Leave Management System Project vulnerabilities, severities, and proof-of-concept exploits.

Online Leave Management System Project products with known CVEs

ProductCVEs
Online Leave Management System12
Online Leave Management System Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-45009High7.22022-12-07Online Leave Management System v1.0 was discovered to contain an arbitrary file upload vulnerability at /leave_system/classes/SystemSettings.php?f=update_setti…
CVE-2022-45008Medium4.82022-12-07Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /leave_system/admin/?page=main…
CVE-2022-43179High7.22022-11-17Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?page=user/manage_user&id=.
CVE-2022-41379High7.22022-10-07An arbitrary file upload vulnerability in the component /leave_system/classes/Users.php?f=save of Online Leave Management System v1.0 allows attackers to execu…
CVE-2022-41355High7.22022-10-06Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /leave_system/classes/Master.php?f=delete_d…
CVE-2022-40928High7.22022-09-26Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_application.
CVE-2022-40927High7.22022-09-26Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_designation.
CVE-2022-40926High7.22022-09-26Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_leave_type.
CVE-2022-38304High7.22022-09-12Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manage_leave_type.php.
CVE-2022-38303High7.22022-09-12Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manage_leave_type.php.
CVE-2022-38302High7.22022-09-12Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manage_department.php.
CVE-2021-40595Critical9.82022-01-21SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the userna…