CVE-2025-56254

PHPGurukul Employee Leave Management System version 2.1 is vulnerable to an Insecure Direct Object Reference (IDOR) in the leave-details.php file. An authenticated user can manipulate the leaveid parameter in the URL to gain unauthorized access to leave application details belonging to other user...