CVE-2025-11556

CVE-2025-11556 affects Code-Projects Simple Leave Manager 1.0. The vulnerability is a SQL injection in the /user.php file caused by improper handling/manipulation of the argument table, enabling remote exploitation. The exploit has been published and may be used. Impact is described as high for c...

CVE-2025-14223

CVE-2025-14223 affects Code-Projects Simple Leave Manager 1.0, with a vulnerability in the /request.php file. The issue arises from manipulation of the staff_id parameter, enabling SQL injection. Multiple connected sources confirm remote exploitation potential and public disclosure of the exploit...