CVE-2026-11509
MediumCVSS 6.3Summary
A vulnerability was identified in CodeAstro Leave Management System 1.0. The issue affects some unknown functionality of the file /admin/search_staff_for_updation.php, where manipulation of the argument 'Name' leads to SQL injection.
Risk Assessment
An attacker may exploit this vulnerability remotely, potentially leading to unauthorized access to the database and data leakage.
Recommendation
It is recommended to update the system to the latest version and implement input filtering and validation to prevent SQL injection.
Original NVD description (English source)
A vulnerability was identified in CodeAstro Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/search_staff_for_updation.php. Such manipulation of the argument Name leads to sql injection. The attack may be performed from remote.