CVE-2026-15523

Publié : 13 juillet 2026

Modifié : 13 juillet 2026

Score CVSS

6.3

MEDIUM

Description détaillée

A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLeave/admin/dashboard.php. This manipulation of the argument Name causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://codeastro.com/https://github.com/wsx138/cve/issues/2 https://vuldb.com/cve/CVE-2026-15523 https://vuldb.com/submit/854524 https://vuldb.com/vuln/377852 https://vuldb.com/vuln/377852/cti

Dernières Vulnérabilités

CVE-2026-9492

The MBStorage DRAM lighting control module within Gigabyte Control Center (GCC) developed by GIGABYTE Technology has an Improper Access Control vulnerability. Authenticated local attackers can send specific IOCTL commands through the driver MyPortIO_x64.sys bundled with the module, thereby arbitrarily reading and writing physical memory and obtaining kernel-level privileges.

VOIR DÉTAILS

CVE-2026-7162

Successful exploitation of the integer overflow vulnerability could allow an attacker to achieve system-level access to the affected software.

VOIR DÉTAILS

CVE-2026-15553

Enterprise Cloud Database developed by Ragic has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload malicious files and make them available for users to download.

VOIR DÉTAILS