CVE-2025-11432: itsourcecode Leave Management System reset.php sql injection
A vulnerability was identified in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /reset.php. Such manipulation of the argument employid leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11432?
CVE-2025-11432 is considered a high-severity vulnerability due to its potential for SQL injection.
How do I fix CVE-2025-11432?
To fix CVE-2025-11432, ensure that user inputs are properly sanitized and use prepared statements when interacting with the database.
What systems are affected by CVE-2025-11432?
CVE-2025-11432 affects itsourcecode Leave Management System version 1.0.
Can CVE-2025-11432 be exploited remotely?
Yes, CVE-2025-11432 can be exploited remotely by manipulating the employid argument in the /reset.php file.
Is there a public exploit available for CVE-2025-11432?
Yes, public exploits for CVE-2025-11432 are available, increasing the urgency for remediation.