Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2021-40595: Online Leave Management System in PHP Free Source Code

SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leave_system/classes/Login.php.

CVE
#sql#vulnerability#web#apache#java

Submitted by oretnom23 on Monday, August 23, 2021 - 01:30.

I have created a PHP Project entitled Online Employee Leave Management System. This PHP Project provides the company’s management and employees an online platform to manage the leave applications. The application is mobile-responsive which is helpful nowadays because most of the employees owning a personal mobile smartphone. Using this system, the employees can easily apply for leave even they are not present in the office. Also, management can easily track the employees’ leave records annually and this application has a feature that prevents the employee to apply if they already consumed their leave credits. Each employee’s leave privileges are manageable here which means the management can manage the employee’s leave privilege and credits individually. The employees’ leave credits are automatically reset annually. This online application also generates a printable date-wise report for leave applications.

****About the Online Employee Leave Management System****

This web application was developed using PHP, MySQL Database, HTML, CSS, JavaScript (Ajax & jQuery), Bootstrap, AdminLTE Template, and some other libraries/plugins. I created this project using XAMPP version 3.30 and does have a PHP version of 8.0.7.

The Online Employee Leave Management System is easy to use and has a pleasant user interface. This consists of 3 types of system users which are the Admin, Staff, and Employee. The Admin User has access and can manage all the features and functionalities of the system. The Staff User has only restricted access to some features and functionalities does the Admin has. Lastly, the Employee User can only track his/her leave records, manage his/her application, and manage his/her system account/credentials.

****Features******Admin Side**

  • Secure Login/Logout
  • Dashboard
  • Manage Department List
  • Manage Designation List
  • Manage List of Leave Types
  • Manage Employee List
  • Manage Employee’s Leave Privilege
  • Manage Leave Applications
  • Manage User List
  • Update Leave Application’s Status
  • Print Employees Leave Records
  • Generate Leave Application Report
  • Manage System Settings
  • Manage Account Credentials

Staff Side

  • Secure Login/Logout
  • Dashboard
  • Manage Employee List
  • Manage Employee’s Leave Privilege
  • Manage Leave Applications
  • Update Leave Application’s Status
  • Print Employees Leave Records
  • Generate Leave Application Report
  • Manage System Settings
  • Manage Account Credentials

Employees Side

  • Secure Login/Logout
  • Dashboard
  • View Leave Records
  • Print Leave Records
  • Create Leave Application
  • Manage Leave Application
  • Manage Account Credentials

**System Snapshots******Employee’s Record Page****

Leave Management System

****Leave Application List (Admin)****

Leave Management System

****New Employee Form****

Leave Management System

****Manage Employee’s Leave Privilege and Credits****

Leave Management System

The source code is free to download on this website. Feel Free to Download and Modify the source code the way you wanted to meet your requirements. Follow the instructions below to run the project.

****How to Run ??****

Requirements

  • Download and Install any local web server such as XAMPP/WAMP.
  • Download the provided source code zip file. (download button is located below)

Installation/Setup

  1. Open your XAMPP/WAMP’s Control Panel and start the Apache and MySQL.
  2. Extract the downloaded source code zip file.
  3. If you are using XAMPP, copy the extracted source code folder and paste it into the XAMPP’s “htdocs” directory. And If you are using WAMP, paste it into the “www” directory.
  4. Browse the PHPMyAdmin in a browser. i.e. http://localhost/phpmyadmin
  5. Create a new database naming leave_db.
  6. Import the provided SQL file. The file is known as leave_db.sql located inside the database folder.
  7. Browse the Online Employee Leave Management System in a browser. i.e. http://localhost/leave_system.

Default Admin Access Information

Username: admin
Password: admin123

Note: Newly created employee’s default system password is his/her Employee ID.

****DEMO****

That’s it. You can now explore the features and functionalities of this Online Employee Leave Management System that was developed using PHP Language and MySQL Database. I hope this project will help you with what you are looking for and you’ll find something useful for your future projects.

Explore more on this website for more Free Source Codes and Tutorials.

Enjoy :)

  • 4635 views

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda