Approved changes feed: RSS · Atom

cpe:2.3:a:codeastro:simple_online_leave_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodeastro (f92dc1fe-f2d7-58ad-92b0-40a98a9042be)
ProductSimple Online Leave Management System (797f6a87-038f-55d9-a047-0cccb906aec2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-15559 vulnerable 2026-07-29 00:26:18.290205 CodeAstro Simple Online Leave Management System POST accept.php sql injection
MEDIUM (6.3)
A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component POST Handler. Performing a manipulation of the argument appid results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Published: 2026-07-13T12:00:08.787Z
Updated: 2026-07-13T13:03:35.884Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15558 vulnerable 2026-07-29 00:26:18.290050 CodeAstro Simple Online Leave Management System deletemp.php sql injection
MEDIUM (6.3)
A security vulnerability has been detected in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLeave/admin/deletemp.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-07-13T11:30:08.876Z
Updated: 2026-07-13T13:44:38.097Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15523 vulnerable 2026-07-29 00:26:18.225840 CodeAstro Simple Online Leave Management System dashboard.php sql injection
MEDIUM (6.3)
A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLeave/admin/dashboard.php. This manipulation of the argument Name causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-07-13T02:00:07.786Z
Updated: 2026-07-14T14:51:19.345Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.