CVE:CVE-2022-41355
CNNVD:CNNVD-202210-237
Sourcecodester Online Leave Management System是一个在线休假管理系统。
Online Leave Management System v1.0版本存在SQL注入漏洞，该漏洞源于攻击者可以通过URL：/leave_system/classes/Master.php?f=delete_department的id参数进行SQL注入。
solution:Upgrade online_leave_management_system_project online_leave_management_system to a higher version than 1.0,and avoid the version 1.0