CVE 5.3 MEDIUM

CodeAstro Leave Management System search_staff_to_assign_pc.php sql injection_CVE-2026-11508

5.3 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was determined in CodeAstro Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/search_staff_to_assign_pc.php. This manipulation of the argument Name causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Basic Information

ID CVE-2026-11508
Source VulDB
Published Jun 8, 2026 at 11:00

Affected Product

Vendor CodeAstro
Product Leave Management System
Version 1.0
Affected Versions CodeAstro Leave Management System 1.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.