Approved changes feed: RSS · Atom

cpe:2.3:a:itsourcecode:leave_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorItsourcecode (14c06684-839a-5802-ab2e-bd37208c001a)
ProductLeave Management System (03c2312c-51df-5f86-a840-236f1d73e335)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-93963 vulnerable 2026-10-13 12:28:56.179732 itsourcecode Leave Management System controller.php sql injection
MEDIUM (6.3)
A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/department/controller.php. The manipulation of the argument DEPTID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-09-20T05:15:07.328Z
Updated: 2026-09-21T18:09:42.893Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-92364 vulnerable 2026-10-13 12:28:53.438177 itsourcecode Leave Management System index.php sql injection
MEDIUM (6.3)
A vulnerability has been found in itsourcecode Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /module/employee/index.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2026-09-16T13:45:10.130Z
Updated: 2026-09-16T15:28:07.175Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-92526 vulnerable 2026-10-13 12:28:53.349951 itsourcecode Leave Management System index.php sql injection
MEDIUM (6.3)
A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/leave/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.
Published: 2026-09-16T20:00:08.882Z
Updated: 2026-09-22T20:29:45.284Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-95833 vulnerable 2026-10-13 12:28:40.591952 itsourcecode Leave Management System index.php sql injection
MEDIUM (6.3)
A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file /module/leavetype/index.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-09-22T23:45:11.958Z
Updated: 2026-09-23T14:34:00.811Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-94032 vulnerable 2026-10-13 12:28:38.844904 itsourcecode Leave Management System index.php sql injection
MEDIUM (6.3)
A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown part of the file /module/department/index.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.
Published: 2026-09-20T14:30:08.250Z
Updated: 2026-09-22T15:42:57.849Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-90789 vulnerable 2026-09-16 04:33:05.507290 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-90796 vulnerable 2026-09-16 04:33:05.187026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11433 vulnerable 2026-06-08 07:04:28.096374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11432 vulnerable 2026-06-08 07:04:28.068426 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.