CVE-2025-11113: CodeAstro Online Leave Application signup.php sql injection

Published Sep 28, 2025

Updated

A vulnerability was detected in CodeAstro Online Leave Application 1.0. Affected is an unknown function of the file /signup.php. Performing manipulation of the argument city results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. Other parameters might be affected as well.

Affected Software

2 affected components

Codeastro Online Leave Application

Codeastro Online Leave Application=1.0

Event History

Sep 28, 2025

CVE Published

via MITRE·05:32 PM

Data Sourced

via MITRE·05:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11113?

CVE-2025-11113 is considered a critical vulnerability due to its potential for SQL injection attacks.

How do I fix CVE-2025-11113?

To fix CVE-2025-11113, ensure proper input validation and parameterized queries in the affected /signup.php file.

What type of vulnerability is CVE-2025-11113?

CVE-2025-11113 is an SQL injection vulnerability that can be exploited by manipulating the 'city' parameter.

Can CVE-2025-11113 be exploited remotely?

Yes, CVE-2025-11113 can be exploited remotely by attackers.

Which software is affected by CVE-2025-11113?

CVE-2025-11113 affects the CodeAstro Online Leave Application version 1.0.