Jorani v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at application/controllers/Leaves.php.

Published Jun 27, 2022 · Updated Mar 30, 2026 · Assigned by mitre