CVE-2023-44481

Summary

CVE-2023-44481: The Leave Management System Project v1.0 contains authenticated SQL injection vulnerabilities. The 'setearnleave' parameter in the admin/setleaves.php resource fails to validate user input, allowing malicious actors to inject SQL commands into the database. This issue poses a significant risk as it can lead to unauthorized data access, modification, or even system compromise. Organizations using this version of the Leave Management System are advised to apply the necessary patches promptly to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.