Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Jorani 0.6.5. SQL Injection (error-based) allows a user of the application without permissions to read and modify sensitive information from the database used by the application via the startdate or enddate parameter to leaves/validate.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jorani SQL注入漏洞
Vulnerability Description
Jorani是一套基于PHP和MySQL的开源企业休假管理系统。该系统主要用于管理企业员工的休假、加班和离职等。 Jorani 0.6.5版本中的leaves/validate页面存在SQL注入漏洞。远程攻击者可借助‘startdate’或‘enddate’参数利用该漏洞读取并修改该应用程序所使用的数据库中的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A