CVE-2025-11113

CVE-2025-11113 affects CodeAstro Online Leave Application 1.0. The vulnerability is in /signup.php, where manipulating the city parameter results in SQL injection. The attack can be performed remotely and public exploits are known. Other parameters may also be affected. Several connected sources ...

CVE-2025-11114

CodeAstro Online Leave Application 1.0 contains a SQL injection vulnerability in the file /leaveAplicationForm.php via manipulation of the absence[] parameter. The weakness stems from an unknown functionality exposure and can be exploited remotely; the exploit has been published and may be used. ...