Online Leave Management System Project
Online Leave Management System Project Online Leave Management System: vulnerabilidades y CVE
Online Leave Management System Project Online Leave Management System tiene 12 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE12
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-45009 | Alta (7.2) | 1.1% | — | 7 dic 2022 | Online Leave Management System v1.0 was discovered to contain an arbitrary file upload vulnerability at /leave_system/classes/SystemSettings.php?f=update_settings. This vulnerability allows attackers to execute… |
| CVE-2022-45008 | Media (4.8) | 0.45% | — | 7 dic 2022 | Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /leave_system/admin/?page=maintenance/department. This vulnerability allows attackers to… |
| CVE-2022-43179 | Alta (7.2) | 0.76% | — | 17 nov 2022 | Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?page=user/manage_user&id=. |
| CVE-2022-41379 | Alta (7.2) | 1.3% | — | 7 oct 2022 | An arbitrary file upload vulnerability in the component /leave_system/classes/Users.php?f=save of Online Leave Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. |
| CVE-2022-41355 | Alta (7.2) | 1.0% | — | 6 oct 2022 | Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /leave_system/classes/Master.php?f=delete_department. |
| CVE-2022-40928 | Alta (7.2) | 0.97% | — | 26 sept 2022 | Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_application. |
| CVE-2022-40927 | Alta (7.2) | 0.97% | — | 26 sept 2022 | Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_designation. |
| CVE-2022-40926 | Alta (7.2) | 0.95% | — | 26 sept 2022 | Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_leave_type. |
| CVE-2022-38304 | Alta (7.2) | 1.00% | — | 12 sept 2022 | Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manage_leave_type.php. |
| CVE-2022-38303 | Alta (7.2) | 1.00% | — | 12 sept 2022 | Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manage_leave_type.php. |
| CVE-2022-38302 | Alta (7.2) | 0.98% | — | 12 sept 2022 | Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manage_department.php. |
| CVE-2021-40595 | Crítica (9.8) | 1.4% | — | 21 ene 2022 | SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leave_system/classes/Login.php. |