CVE-2023-44482 (published 2023-12-21T18:59:05.773Z)
Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setsickleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database.


Affected products: Vendor: Projectworlds Pvt. Limited
Product: Leave Management System Project
Versions: 1.0