CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2023-44482 – Leave Management System Project v1.0 - Multiple Authenticated SQL Injections (SQLi)
https://notcve.org/view.php?id=CVE-2023-44482
21 Dec 2023 — Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setsickleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database. Leave Management System Project v1.0 es afectado por múltiples vulnerabilidades de inyección SQL autenticada. El parámetro 'setsickleave' del recurso admin/setleaves.php no valida los caracteres recibidos y se envían sin filtrar a la base de datos. Le... • https://fluidattacks.com/advisories/martin • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2023-44481 – Leave Management System Project v1.0 - Multiple Authenticated SQL Injections (SQLi)
https://notcve.org/view.php?id=CVE-2023-44481
21 Dec 2023 — Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setearnleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database. Leave Management System Project v1.0 es afectado por múltiples vulnerabilidades de inyección SQL autenticada. El parámetro 'setearnleave' del recurso admin/setleaves.php no valida los caracteres recibidos y se envían sin filtrar a la base de datos. Le... • https://fluidattacks.com/advisories/martin • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2023-44480 – Leave Management System Project v1.0 - Multiple Authenticated SQL Injections (SQLi)
https://notcve.org/view.php?id=CVE-2023-44480
27 Oct 2023 — Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setcasualleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database. Leave Management System Project v1.0 es afectado por múltiples vulnerabilidades de inyección SQL autenticada. El parámetro 'setcasualleave' del recurso admin/setleaves.php no valida los caracteres recibidos y se envían sin filtrar a la base de datos... • https://fluidattacks.com/advisories/martin • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •