PT-2026-29327 · Sourcecodester · Leave Application System

Published 2026-03-31 · Updated 2026-03-31 · CVE-2026-5210

NVD

CVSS v2.0

7.5

High

AV:N/AC:L/Au:N/C:P/I:P/A:P

A vulnerability was detected in SourceCodester Leave Application System 1.0. This affects an unknown part. Performing a manipulation of the argument page results in file inclusion. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Exploit

Fix

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2026-5210

Affected Products

Leave Application System

References · 6

• 🔥 https://medium.com/@hemantrajbhati5555/local-file-inclusion-lfi-in-leave-application-system-php-sqlite3-4e095bb7ee40 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5210 · Security Note
• https://vuldb.com/submit/780419 · Note
• https://sourcecodester.com · Note
• https://vuldb.com/vuln/354346 · Note
• https://vuldb.com/vuln/354346/cti · Note