online leave management system project vulnerabilities

Recent CVEs affecting online leave management system project products. 12 tracked.

online leave management system project has 12 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-12-07. Highest priority: CVE-2021-40595 (score 62/100).

• CVE-2022-45009 HIGH 7.2 DOWNGRADE Online Leave Management System v1.0 was discovered to contain an arbitrary file upload vulnerability at /leave
• CVE-2022-45008 MEDIUM 4.8 DOWNGRADE Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerabilit
• CVE-2022-43179 HIGH 7.2 DOWNGRADE Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component
• CVE-2022-41379 HIGH 7.2 DOWNGRADE An arbitrary file upload vulnerability in the component /leave_system/classes/Users.php?f=save of Online Leave
• CVE-2022-41355 HIGH 7.2 DOWNGRADE Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet
• CVE-2022-40928 HIGH 7.2 DOWNGRADE Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=dele
• CVE-2022-40927 HIGH 7.2 DOWNGRADE Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=dele
• CVE-2022-40926 HIGH 7.2 DOWNGRADE Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=dele
• CVE-2022-38304 HIGH 7.2 DOWNGRADE Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet
• CVE-2022-38303 HIGH 7.2 DOWNGRADE Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet
• CVE-2022-38302 HIGH 7.2 DOWNGRADE Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramet
• CVE-2021-40595 CRITICAL 9.8 DOWNGRADE SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers

FAQ

How do I fix online leave management system project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is online leave management system project being exploited right now?

None of the tracked online leave management system project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which online leave management system project CVE should I patch first?

CVE-2021-40595 currently ranks highest (62/100): SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers.

Products

• online leave management system

RSS feed for online leave management system project · ← Back to latest CVEs