Approved changes feed: RSS · Atom

cpe:2.3:a:codeastro:leave_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodeastro (f92dc1fe-f2d7-58ad-92b0-40a98a9042be)
ProductLeave Management System (0a273b9a-1bb2-54dd-b94d-5f8be3e0e593)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-11510 vulnerable 2026-07-29 00:23:31.320829 CodeAstro Leave Management System add_leave.php sql injection
MEDIUM (6.3)
A security flaw has been discovered in CodeAstro Leave Management System 1.0. This affects an unknown part of the file /admin/add_leave.php. Performing a manipulation of the argument type_of_leave results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-06-08T11:30:10.281Z
Updated: 2026-06-08T12:54:17.684Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11509 vulnerable 2026-07-29 00:23:31.320703 CodeAstro Leave Management System search_staff_for_updation.php sql injection
MEDIUM (6.3)
A vulnerability was identified in CodeAstro Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/search_staff_for_updation.php. Such manipulation of the argument Name leads to sql injection. The attack may be performed from remote.
Published: 2026-06-08T11:15:08.163Z
Updated: 2026-06-08T16:22:16.305Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11508 vulnerable 2026-07-29 00:23:31.320469 CodeAstro Leave Management System search_staff_to_assign_pc.php sql injection
MEDIUM (6.3)
A vulnerability was determined in CodeAstro Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/search_staff_to_assign_pc.php. This manipulation of the argument Name causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-06-08T11:00:14.109Z
Updated: 2026-06-09T15:16:36.869Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11507 vulnerable 2026-07-29 00:23:31.320328 CodeAstro Leave Management System delete_leave_type.php sql injection
MEDIUM (6.3)
A vulnerability was found in CodeAstro Leave Management System 1.0. Affected is an unknown function of the file /admin/delete_leave_type.php. The manipulation of the argument leave_type results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.
Published: 2026-06-08T10:45:09.207Z
Updated: 2026-06-08T13:59:30.840Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11506 vulnerable 2026-07-29 00:23:31.320122 CodeAstro Leave Management System search_staff_for_deletion.php sql injection
MEDIUM (6.3)
A vulnerability has been found in CodeAstro Leave Management System 1.0. This impacts an unknown function of the file /admin/search_staff_for_deletion.php. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Published: 2026-06-08T10:30:11.488Z
Updated: 2026-06-09T15:40:58.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9542 vulnerable 2026-06-08 08:08:59.027137 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8132 vulnerable 2026-06-08 08:08:58.135098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.