CVE-2026-15134: CodeAstro Simple Online Leave Management System index.php sql injection
A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /SimpleOnlineLeave/index.php. Executing a manipulation of the argument email can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-15134?
CVE-2026-15134 has a severity score of 7.3, categorized as high risk.
How do I fix CVE-2026-15134?
To mitigate CVE-2026-15134, validate and sanitize user inputs, especially the email parameter in the index.php file.
What type of vulnerability is CVE-2026-15134?
CVE-2026-15134 is classified as an SQL Injection vulnerability.
What can an attacker achieve with CVE-2026-15134?
An attacker exploiting CVE-2026-15134 can execute unauthorized SQL commands, potentially leading to data leakage or corruption.
Which software is affected by CVE-2026-15134?
CVE-2026-15134 affects CodeAstro Simple Online Leave Management System version 1.0.