Leave Management System vulnerabilities

2 known vulnerabilities in Leave Management System from itsourcecode. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Leave Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-90789Sep 14, 2026itsourcecode

  A weakness has been identified in itsourcecode Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Executing a manipulation of the argument user_email can lead to sql injection. The attack may be launched r

• 9.8 Critical severity

  Leave Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-11432Oct 8, 2025itsourcecode

  A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /reset.php. Such manipulation of the argument employid leads to sql injection. The attack may be performed from remote. The exploit is publ