CVE-2025-11113

MediumCVSS 6.3

Published: 28/09/2025(UTC)Updated: 09/10/2026(UTC)Translated: 09/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

Summary

A vulnerability was detected in CodeAstro Online Leave Application 1.0. It affects an unknown function in the file /signup.php. Manipulation of the city argument results in SQL injection. The attack may be initiated remotely. The exploit is now public and may be used. Other parameters might be affected as well.

Risk Assessment

The vulnerability allows a remote attacker to inject SQL code, potentially leading to unauthorized data access or corruption.

Recommendation

It is recommended to immediately validate and sanitize input data in /signup.php and use parameterized queries.

Other vulnerabilities in CodeAstro Online Leave Application

CVE-2025-11114Medium
A flaw has been found in CodeAstro Online Leave Application 1.0. The vulnerability affects an unknown functionality in the file /leaveAplicationForm.php. Manipulation of the absence[] argument can lead to SQL injection. The attack may be launched remotely. The exploit has been published and may be used.

Original NVD description (English source)

A vulnerability was detected in CodeAstro Online Leave Application 1.0. Affected is an unknown function of the file /signup.php. Performing manipulation of the argument city results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. Other parameters might be affected as well.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS