CVE-2022-41379

Description

References

• hegeoo/bug_report · Exploit

online leave management system의 다른 취약점

• CVE-2022-45009높음 7.2Online Leave Management System v1.0 was discovered to contain an arbitrary file upload vulnerability at /leave_system/classes/SystemSettings…
• CVE-2022-45008보통 4.8Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /leave_syst…
• CVE-2022-43179높음 7.2Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/?page=user/manage_user&…
• CVE-2022-41355높음 7.2Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /leave_system/classes/Ma…
• CVE-2022-40928높음 7.2Online Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes/Master.php?f=delete_application.