Veille CVE

Mercredi 16 septembre 2026

2 CVE

  1. CVE-2026-92526 6.3 Moyenne

    itsourcecode Leave Management System

    A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/leave/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.

  2. CVE-2026-92364 6.3 Moyenne

    itsourcecode Leave Management System

    A vulnerability has been found in itsourcecode Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /module/employee/index.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.