Lucene search
+L

5 matches found

osv_cve
osv_cve
•added 2025/09/28 6:15 p.m.•17 views

CVE-2025-11114

A flaw has been found in CodeAstro Online Leave Application 1.0. Affected by this vulnerability is an unknown functionality of the file /leaveAplicationForm.php. Executing manipulation of the argument absence can lead to sql injection. The attack may be launched remotely. The exploit has been...

8.8CVSS5.8AI score0.00389EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/28 6:02 p.m.•31 views

CVE-2025-11114 CodeAstro Online Leave Application leaveAplicationForm.php sql injection

A flaw has been found in CodeAstro Online Leave Application 1.0. Affected by this vulnerability is an unknown functionality of the file /leaveAplicationForm.php. Executing manipulation of the argument absence can lead to sql injection. The attack may be launched remotely. The exploit has been...

6.5CVSS0.00389EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•8 views

CVE-2025-11114: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in CodeAstro Online Leave Application 1.0. Affected by this vulnerability is an unknown functionality of the file /leaveAplicationForm.php. Executing manipulation of the argument absence can lead to sql injection. The attack may be launched remotely. The exploit has been...

8.8CVSS6.5AI score0.00389EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/09/28 12:00 a.m.•22 views

CodeAstro Online Leave Application SQL Injection Vulnerability

CodeAstro Online Leave Application is an online leave application system from CodeAstro, Inc. A SQL injection vulnerability exists in CodeAstro Online Leave Application version 1.0, which stems from incorrect manipulation of the parameter city in the file /signup.php, which could lead to a SQL...

8.8CVSS6.9AI score0.00386EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•9 views

CVE-2025-11113: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in CodeAstro Online Leave Application 1.0. Affected is an unknown function of the file /signup.php. Performing manipulation of the argument city results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. Other parameters...

8.8CVSS6.5AI score0.00386EPSS
SaveExploits1References5
Rows per page
Query Builder