CVE-2026-9542 — CodeAstro Leave Management System add_staff.php sql injection
A weakness has been identified in CodeAstro Leave Management System 1.0. The affected element is an unknown function of the file /admin/add_staff.php. Executing a manipulation o…
Published: 2026-05-26 · CVSS: 5.3 · CVSS 4.0
A weakness has been identified in CodeAstro Leave Management System 1.0. The affected element is an unknown function of the file /admin/add_staff.php. Executing a manipulation of the argument email_id can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7