← CVE Intelligence

CVE-2026-15134

CodeAstro Simple Online Leave Management System index.php sql injection PUBLISHED

Description (CNA)

A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /SimpleOnlineLeave/index.php. Executing a manipulation of the argument email can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Affected (CNA)

Vendor / productVersions
CodeAstro / Simple Online Leave Management Systemaffected 1.0

CWE

CWE-89, CWE-74

References

ADP enrichment

CISA-ADP

No English description supplied.