| Package | Affected versions | Patched versions |
|---|---|---|
| leave management system | = 1.0 |
Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setcasualleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free