CVE-2018-15918

An issue was discovered in Jorani 0.6.5. SQL Injection (error-based) allows a user of the application without permissions to read and modify sensitive information from the database used by the application via the startdate or enddate parameter to leaves/validate.

• CWE-89

• https://github.com/bbalet/jorani/issues/254Issue Tracking, Vendor Advisory
• https://hackpuntes.com/cve-2018-15918-jorani-leave-management-system-0-6-5-sql-injection/Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/45340/Third Party Advisory, VDB Entry
• https://github.com/bbalet/jorani/issues/254Issue Tracking, Vendor Advisory
• https://hackpuntes.com/cve-2018-15918-jorani-leave-management-system-0-6-5-sql-injection/Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/45340/Third Party Advisory, VDB Entry

Published

Sep 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15909In Artifex Ghostscript 9.23 before 2018-08-24, a type confus…
• CVE-2018-15910In Artifex Ghostscript before 9.24, attackers able to supply…
• CVE-2018-15911In Artifex Ghostscript 9.23 before 2018-08-24, attackers abl…
• CVE-2018-15912An issue was discovered in manjaro-update-system.sh in manja…
• CVE-2018-15913An issue was discovered in Cloudera Manager 5.x through 5.15…6.1
• CVE-2018-15917Persistent cross-site scripting (XSS) issues in Jorani 0.6.5…
• CVE-2018-15919Remotely observable behaviour in auth-gss2.c in OpenSSH thro…5.3
• CVE-2018-15920Adobe Acrobat and Reader versions 2018.011.20063 and earlier…
• CVE-2018-15921Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-15922Adobe Acrobat and Reader versions 2018.011.20063 and earlier…
• CVE-2018-15923Adobe Acrobat and Reader versions 2018.011.20063 and earlier…
• CVE-2018-15924Adobe Acrobat and Reader versions 2018.011.20063 and earlier…