Skip to content
Threat Feed
Subscribe

Product

Simple Online Leave Management System 1.0

1 brief RSS
high advisory

CVE-2026-15134: SQL Injection in CodeAstro Simple Online Leave Management System

A high-severity SQL injection vulnerability (CVE-2026-15134) in CodeAstro Simple Online Leave Management System 1.0, specifically within the '/SimpleOnlineLeave/index.php' file, allows a remote unauthenticated attacker to execute arbitrary SQL commands by manipulating the 'email' argument, leading to unauthorized database access and data compromise, with a public exploit available.

Simple Online Leave Management System 1.0 sql-injection web-application cve remote-code-execution data-exfiltration
1r 2t 1c