CVE-2026-15134

Description

A vulnerability was determined in CodeAstro Simple Online Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /SimpleOnlineLeave/index.php. Executing a manipulation of the argument email can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

CVSS Vector

References

• https://codeastro.com/
• https://github.com/yihaofuweng/cve/issues/71
• https://vuldb.com/cve/CVE-2026-15134
• https://vuldb.com/submit/851046
• https://vuldb.com/vuln/376949
• https://vuldb.com/vuln/376949/cti
• https://github.com/yihaofuweng/cve/issues/71