Cshwswwsshd99

**Name of the Vulnerable Software and Affected Versions** CodeAstro Simple Online Leave Management System version 1.0 **Description** Remote SQL injection is possible due to improper handling of the `ID` variable in the '/SimpleOnlineLeave/admin/deletemp.php' endpoint. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database. **Recommendations** Update CodeAstro Simple Online Leave Management System version 1.0 to a patched version. As a temporary mitigation, restrict access to the '/SimpleOnlineLeave/admin/deletemp.php' endpoint.

**Name of the Vulnerable Software and Affected Versions** CodeAstro Simple Online Leave Management System version 1.0 **Description** Remote SQL injection is possible via the POST Handler component in the '/SimpleOnlineLeave/admin/accept.php' endpoint. The issue occurs when the `appid` argument is manipulated, allowing an attacker to execute arbitrary SQL commands. **Recommendations** Update CodeAstro Simple Online Leave Management System version 1.0. As a temporary mitigation, restrict access to the '/SimpleOnlineLeave/admin/accept.php' endpoint or avoid using the `appid` parameter until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** CodeAstro Payroll System version 1.0 **Description** A remote SQL injection is possible due to the manipulation of the `rate/salary rate` argument within an unknown function of the '/home salary.php' file. SQL injection is a technique where an attacker inserts malicious SQL code into a query, allowing them to manipulate the database. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.