CyberRota Analysis
AI-GeneratedThe CodeAstro Simple Online Leave Management System 1.0 is vulnerable to SQL injection through the POST handler in the accept.php file, allowing remote attackers to manipulate the appid argument. This could lead to unauthorized access to the database, potentially exposing sensitive information. Organizations using this system should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component POST Handler. Performing a manipulation of the argument appid results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.