Codeastro Online Leave Application vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Codeastro Online Leave Application: 2 record(s), with affected versions and fixes.cpe:2.3:a:codeastro:online_leave_application
CVE-2025-11114
High · 8.8
CWE-74 Sep 28, 2025
CodeAstro Online Leave Application leaveAplicationForm.php sql injection
A flaw has been found in CodeAstro Online Leave Application 1.0. Affected by this vulnerability is an unknown functionality of the file /leaveAplicationForm.php. Executing manipulation of the argument absence[] can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.
CVE-2025-11113
High · 8.8
CWE-74 Sep 28, 2025
CodeAstro Online Leave Application signup.php sql injection
A vulnerability was detected in CodeAstro Online Leave Application 1.0. Affected is an unknown function of the file /signup.php. Performing manipulation of the argument city results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. Other parameters might be affected as well.