CVE-2026-15523: CodeAstro Simple Online Leave Management System dashboard.php sql injection
A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLeave/admin/dashboard.php. This manipulation of the argument Name causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-15523?
The severity of CVE-2026-15523 is medium, rated at 6.3 on the CVSS scale.
What vulnerability is associated with CVE-2026-15523?
CVE-2026-15523 is associated with SQL injection in the dashboard.php file of CodeAstro Simple Online Leave Management System.
How can I fix CVE-2026-15523?
To fix CVE-2026-15523, validate and sanitize all user inputs to prevent SQL injection vulnerabilities.
What is affected by CVE-2026-15523?
CVE-2026-15523 affects the CodeAstro Simple Online Leave Management System version 1.0.
Can CVE-2026-15523 be exploited remotely?
Yes, CVE-2026-15523 can be exploited remotely through the vulnerable dashboard.php file.