online leave management system vulnerabilities and fixes

Recent CVEs affecting online leave management system, with upgrade or downgrade steps. 12 tracked.

Also searched as: onlineleavemanagementsystem.

online leave management system has 12 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-12-07. Highest priority: CVE-2021-40595 (score 62/100).

CVE-2022-45009 HIGH 7.2 DOWNGRADE Online Leave Management System v1.0 was discovered to contain an arbitrary file upload vulnerability at /leave
CVE-2022-45008 MEDIUM 4.8 DOWNGRADE Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerabilit
CVE-2022-43179 HIGH 7.2 DOWNGRADE Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component
CVE-2022-41379 HIGH 7.2 DOWNGRADE An arbitrary file upload vulnerability in the component /leave_system/classes/Users.php?f=save of Online Leave
CVE-2022-41355 HIGH 7.2 DOWNGRADE Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet
CVE-2022-40928 HIGH 7.2 DOWNGRADE Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=dele
CVE-2022-40927 HIGH 7.2 DOWNGRADE Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=dele
CVE-2022-40926 HIGH 7.2 DOWNGRADE Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=dele
CVE-2022-38304 HIGH 7.2 DOWNGRADE Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet
CVE-2022-38303 HIGH 7.2 DOWNGRADE Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet
CVE-2022-38302 HIGH 7.2 DOWNGRADE Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet
CVE-2021-40595 CRITICAL 9.8 DOWNGRADE SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers

FAQ

How do I fix online leave management system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is online leave management system being exploited right now?

None of the tracked online leave management system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which online leave management system CVE should I patch first?

CVE-2021-40595 currently ranks highest (62/100): SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers.

RSS feed for online leave management system · ← Back to latest CVEs