Online Leave Management System Project

Online Leave Management System

12 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8

CVE-2022-45008

Exploit
  • EPSS 0.24%
  • Veröffentlicht 07.12.2022 02:15:09
  • Zuletzt bearbeitet 23.04.2025 14:15:25

Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /leave_system/admin/?page=maintenance/department. This vulnerability allows attackers to execute arbitrary web scripts or...

7.2

CVE-2022-45009

Exploit
  • EPSS 0.94%
  • Veröffentlicht 07.12.2022 02:15:09
  • Zuletzt bearbeitet 23.04.2025 14:15:25

Online Leave Management System v1.0 was discovered to contain an arbitrary file upload vulnerability at /leave_system/classes/SystemSettings.php?f=update_settings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

7.2

CVE-2022-43179

Exploit
  • EPSS 0.26%
  • Veröffentlicht 17.11.2022 21:15:15
  • Zuletzt bearbeitet 29.04.2025 20:15:22

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?page=user/manage_user&id=.

7.2

CVE-2022-41379

Exploit
  • EPSS 0.94%
  • Veröffentlicht 07.10.2022 19:15:13
  • Zuletzt bearbeitet 21.11.2024 07:23:07

An arbitrary file upload vulnerability in the component /leave_system/classes/Users.php?f=save of Online Leave Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

7.2

CVE-2022-41355

Exploit
  • EPSS 0.26%
  • Veröffentlicht 06.10.2022 20:15:36
  • Zuletzt bearbeitet 21.11.2024 07:23:06

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /leave_system/classes/Master.php?f=delete_department.

7.2

CVE-2022-40926

Exploit
  • EPSS 0.26%
  • Veröffentlicht 26.09.2022 13:15:11
  • Zuletzt bearbeitet 21.05.2025 19:16:02

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_leave_type.

7.2

CVE-2022-40927

Exploit
  • EPSS 0.26%
  • Veröffentlicht 26.09.2022 13:15:11
  • Zuletzt bearbeitet 21.05.2025 19:16:03

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_designation.

7.2

CVE-2022-40928

Exploit
  • EPSS 0.26%
  • Veröffentlicht 26.09.2022 13:15:11
  • Zuletzt bearbeitet 21.05.2025 18:15:51

Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_application.

7.2

CVE-2022-38302

Exploit
  • EPSS 0.26%
  • Veröffentlicht 12.09.2022 23:15:08
  • Zuletzt bearbeitet 21.11.2024 07:16:12

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manage_department.php.

7.2

CVE-2022-38303

Exploit
  • EPSS 0.26%
  • Veröffentlicht 12.09.2022 23:15:08
  • Zuletzt bearbeitet 21.11.2024 07:16:13

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /employees/manage_leave_type.php.