CVE-2026-11510

Summary

A security flaw has been discovered in CodeAstro Leave Management System 1.0. This affects an unknown part of the file /admin/add_leave.php. Performing a manipulation of the argument type_of_leave results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.

Affected Software

Weaknesses

• CWE-89: SQL Injection
• CWE-74: Injection

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://vuldb.com/vuln/369130
• https://vuldb.com/vuln/369130/cti
• https://vuldb.com/cve/CVE-2026-11510
• https://vuldb.com/submit/836789
• https://github.com/Andelstander/cve/issues/3
• https://codeastro.com/

• ←Previous
• Next→