CVE-2025-11114: CodeAstro Online Leave Application leaveAplicationForm.php sql injection

Published Sep 28, 2025

Updated

A flaw has been found in CodeAstro Online Leave Application 1.0. Affected by this vulnerability is an unknown functionality of the file /leaveAplicationForm.php. Executing manipulation of the argument absence[] can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.

Affected Software

2 affected components

Codeastro Online Leave Application

Codeastro Online Leave Application=1.0

Event History

Sep 28, 2025

CVE Published

via MITRE·06:02 PM

Data Sourced

via MITRE·06:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11114?

CVE-2025-11114 is classified as a high-severity vulnerability due to the potential for remote SQL injection.

How do I fix CVE-2025-11114?

To fix CVE-2025-11114, developers should sanitize and validate all input parameters in the /leaveAplicationForm.php file, particularly the absence[] argument.

What systems are affected by CVE-2025-11114?

CVE-2025-11114 affects CodeAstro Online Leave Application version 1.0.

Can CVE-2025-11114 be exploited remotely?

Yes, CVE-2025-11114 can be exploited remotely by manipulating the absence[] argument.

What types of attacks can result from CVE-2025-11114?

CVE-2025-11114 may allow attackers to execute SQL injection attacks, potentially compromising the application's database.