CVE-2023-44482: Leave Management System Project v1.0 - Multiple Authenticated SQL Injections (SQLi)
Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setsickleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-44482?
CVE-2023-44482 is classified as a high severity vulnerability due to its potential for exploitation via SQL Injection.
How do I fix CVE-2023-44482?
To fix CVE-2023-44482, implement input validation and parameterized queries for the 'setsickleave' parameter.
What kind of vulnerability is CVE-2023-44482?
CVE-2023-44482 is an authenticated SQL Injection vulnerability affecting the Leave Management System.
Who is affected by CVE-2023-44482?
The vulnerability affects users of Projectworlds Leave Management System version 1.0.
Can CVE-2023-44482 lead to data breaches?
Yes, CVE-2023-44482 can lead to unauthorized access to sensitive data in the database.