CVE-2026-90796

A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/company/index.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

CVE-2026-90796

itsourcecode Leave Management System 1.0 contains a SQL injection vulnerability in the file /module/company/index.php , triggered by manipulating the ID argument. The attack is remotely exploitable and requires low privileges with no user interaction. Impact is rated MEDIUM (CVSS 3.1 score 6.3), ...

CVE-2026-90789

itsourcecode Leave Management System 1.0 is affected by a SQL injection vulnerability in /login.php . By manipulating the user_email parameter, an unauthenticated remote attacker can inject SQL commands. The CVSS 3.1 score is 7.3 (HIGH) with low impact on confidentiality, integrity, and availabil...

CVE-2025-11432

CVE-2025-11432 affects itsourcecode Leave Management System 1.0. The vulnerability is in the /reset.php file where manipulating the employid parameter enables an SQL injection. The attack can be performed remotely and the exploit is publicly available. Multiple connected sources corroborate the i...