| Package | Affected versions | Patched versions |
|---|---|---|
| employee leave management system | = 2.1 |
PHPGurukul Employee Leave Management System 2.1 contains an Insecure Direct Object Reference (IDOR) vulnerability in leave-details.php. An authenticated user can change the leaveid parameter in the URL to access leave application details of other users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free