critical9.8
CVE-2021-40595
SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the userna…
Impact
SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leave_system/classes/Login.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Online Leave Management System Project | Online Leave Management System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-03
- https://www.sourcecodester.com/php/14910/online-leave-management-system-php-free-source-code.html
- https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-03
- https://www.sourcecodester.com/php/14910/online-leave-management-system-php-free-source-code.html