CVE:CVE-2022-45009
CNNVD:CNNVD-202212-2629
Sourcecodester Online Leave Management System是一个在线休假管理系统。
Online Leave Management System v1.0版本存在安全漏洞，该漏洞源于在/leave_system/classes/SystemSettings.php?f=update_settings中发现包含文件上传漏洞。攻击者利用该漏洞通过特制的PHP文件执行任意代码。
solution:Upgrade online_leave_management_system_project online_leave_management_system to a higher version than 1.0,and avoid the version 1.0