CVE-2023-44480: Leave Management System Project v1.0 - Multiple Authenticated SQL Injections (SQLi)
Published Oct 27, 2023
·Updated
Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setcasualleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database.
Affected Software
1 affected component
Projectworlds Leave Management System=1.0
Event History
Oct 27, 2023
CVE Published
08:52 PM
Data Sourced
08:52 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of the Leave Management System Project?
The vulnerability ID of the Leave Management System Project is CVE-2023-44480.
2
What is the severity of CVE-2023-44480?
The severity of CVE-2023-44480 is critical with a severity value of 9.8.
3
What is the affected software in CVE-2023-44480?
The affected software in CVE-2023-44480 is Projectworlds Leave Management System v1.0.
4
What is the CWE of CVE-2023-44480?
The CWE of CVE-2023-44480 is CWE-89 (SQL Injection).
5
How can I fix the SQL Injection vulnerability in the Leave Management System Project?
To fix the SQL Injection vulnerability, ensure that the 'setcasualleave' parameter of the admin/setleaves.php resource properly validates and filters characters before sending them to the database.