Veille CVE

Dimanche 20 septembre 2026

2 CVE

  1. CVE-2026-94032 6.3 Moyenne

    itsourcecode Leave Management System

    A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown part of the file /module/department/index.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.

  2. CVE-2026-93963 6.3 Moyenne

    itsourcecode Leave Management System

    A security vulnerability has been detected in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/department/controller.php. The manipulation of the argument DEPTID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.