CVE-2025-11114

CodeAstro Online Leave Application 1.0 contains a SQL injection vulnerability in the file /leaveAplicationForm.php via manipulation of the absence[] parameter. The weakness stems from an unknown functionality exposure and can be exploited remotely; the exploit has been published and may be used. ...