CVE-2025-11114

MediumCVSS 6.3

Published: 28/09/2025(UTC)Updated: 09/10/2026(UTC)Translated: 09/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

Summary

A flaw has been found in CodeAstro Online Leave Application 1.0. The vulnerability affects an unknown functionality in the file /leaveAplicationForm.php. Manipulation of the absence[] argument can lead to SQL injection. The attack may be launched remotely. The exploit has been published and may be used.

Risk Assessment

The vulnerability allows a remote attacker to execute unauthorized database queries, potentially leading to data leakage or modification.

Recommendation

It is recommended to immediately validate and sanitize input data in /leaveAplicationForm.php and use parameterized queries.

Other vulnerabilities in CodeAstro Online Leave Application

CVE-2025-11113Medium
A vulnerability was detected in CodeAstro Online Leave Application 1.0. It affects an unknown function in the file /signup.php. Manipulation of the city argument results in SQL injection. The attack may be initiated remotely. The exploit is now public and may be used. Other parameters might be affected as well.

Original NVD description (English source)

A flaw has been found in CodeAstro Online Leave Application 1.0. Affected by this vulnerability is an unknown functionality of the file /leaveAplicationForm.php. Executing manipulation of the argument absence[] can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS