CVE-2026-15134 CodeAstro Simple Online Leave Management System index.php sql injection
MediumCVSS 6.9
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /SimpleOnlineLeave/index.php. Executing a manipulation of the argument email can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| codeastro simple online leave management system | = 1.0 | No fix listed |
References
- VDB-376949 | CodeAstro Simple Online Leave Management System index.php sql injection technical-description vdb-entry
- VDB-376949 | CTI Indicators (IOB, IOC, TTP, IOA) permissions-required signature
- CVE-2026-15134 | CVE Analysis and Report third-party-advisory
- Submit #851046 | codeastro Simple Online Leave Management System V1.0 SQL Injection third-party-advisory
- github.com exploit issue-tracking
- codeastro.com product