PT-2026-57610 · Codeastro · Simple Online Leave Management System

W5555 · Publicado 2026-07-13 · Atualizado 2026-07-13 · CVE-2026-15523

NVD

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLeave/admin/dashboard.php. This manipulation of the argument Name causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.

Exploit

Correção

SQL injection

Special Elements Injection

Enumeração de Fraquezas

CWE-89

CWE-74

Identificadores relacionados

CVE-2026-15523

Produtos afetados

Simple Online Leave Management System

Referências · 7

• 🔥 https://github.com/wsx138/cve/issues/2 · Exploit
• https://vuldb.com/cve/CVE-2026-15523 · Nota
• https://vuldb.com/vuln/377852 · Nota
• https://codeastro.com · Nota
• https://vuldb.com/submit/854524 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-15523 · Nota de Segurança
• https://vuldb.com/vuln/377852/cti · Nota