Medium severity5.4OSV Advisory· Published Sep 5, 2018· Updated Jun 17, 2026

CVE-2018-15918

Description

An issue was discovered in Jorani 0.6.5. SQL Injection (error-based) allows a user of the application without permissions to read and modify sensitive information from the database used by the application via the startdate or enddate parameter to leaves/validate.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jorani/JoraniOSV2 versions
Prototype1, v0.1, v0.1.1, …+ 1 more
- (no CPE)range: Prototype1, v0.1, v0.1.1, …
- (no CPE)range: =0.6.5

Patches

Vulnerability mechanics

References

hackpuntes.com/cve-2018-15918-jorani-leave-management-system-0-6-5-sql-injection/nvdExploitThird Party Advisory
github.com/bbalet/jorani/issues/254nvdIssue TrackingVendor Advisory
www.exploit-db.com/exploits/45340/nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000