Projectworlds Leave Management System vulnerabilities

3 CVEs affecting Projectworlds Leave Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-44482, published 2023-12-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-44480, published 2023-10-27. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setcasualleave' parameter of the admin/setleaves.php resource does not validate the…
CVE-2023-44482, published 2023-12-21. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setsickleave' parameter of the admin/setleaves.php resource does not validate the…
CVE-2023-44481, published 2023-12-21. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setearnleave' parameter of the admin/setleaves.php resource does not validate the…