Veille CVE

Semaine du 28 septembre au 4 octobre 2026

2 CVE

  1. CVE-2026-103690 6.3 Moyenne

    itsourcecode Leave Management System

    A flaw has been found in itsourcecode Leave Management System 1.0. This vulnerability affects unknown code of the file /module/leave/controller.php. Executing a manipulation of the argument LEAVEID can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.

  2. CVE-2026-103543 6.3 Moyenne

    itsourcecode Leave Management System

    A vulnerability has been found in itsourcecode Leave Management System 1.0. The affected element is an unknown function of the file /module/leavetype/controller.php. Such manipulation of the argument LEAVTID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.