Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-9542

CodeAstro Leave Management System add_staff.php sql injection

Description

A weakness has been identified in CodeAstro Leave Management System 1.0. The affected element is an unknown function of the file /admin/add_staff.php. Executing a manipulation of the argument email_id can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CodeAstro Leave Management System

  • 1.0affected

References