CVE-2023-44480 (published 2023-10-27T20:52:46.311Z)
Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setcasualleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database.

Affected products: Vendor: Projectworlds Pvt. Limited
Product: Leave Management System Project
Versions: 1.0