Simple Leave Manager vulnerabilities

2 known vulnerabilities in Simple Leave Manager from code-projects. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Simple Leave Manager: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-14223Dec 8, 2025code-projects

  A vulnerability has been found in code-projects Simple Leave Manager 1.0. Affected by this vulnerability is an unknown functionality of the file /request.php. Such manipulation of the argument staff_id leads to sql injection. The attack may be launched remotel

• 9.8 Critical severity

  Simple Leave Manager: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-11556Oct 9, 2025code-projects

  A flaw has been found in code-projects Simple Leave Manager 1.0. This vulnerability affects unknown code of the file /user.php. This manipulation of the argument table causes sql injection. Remote exploitation of the attack is possible. The exploit has been pu