Lucene search
PRIOn knowledge basePRION:CVE-2023-44482HistoryDec 21, 2023 - 7:15 p.m.
Sql injection
2023-12-2119:15:00
PRIOn knowledge base
www.prio-n.com
4
vulnerability
leave management system
admin parameter
setsickleave
sql injection
Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The ‘setsickleave’ parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database.
| CPE | Name | Operator | Version |
|---|---|---|---|
| leave_management_system | eq | 1.0 |
