CVE-2023-44481 (published 2023-12-21T18:58:20.939Z)
Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setearnleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database.


Affected products: Vendor: Projectworlds Pvt. Limited
Product: Leave Management System Project
Versions: 1.0