CVE-2025-14223: code-projects Simple Leave Manager request.php sql injection
A vulnerability has been found in code-projects Simple Leave Manager 1.0. Affected by this vulnerability is an unknown functionality of the file /request.php. Such manipulation of the argument staffid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14223?
CVE-2025-14223 is classified as a high severity vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-14223?
To fix CVE-2025-14223, sanitize and validate user inputs, particularly the staff_id parameter, to prevent SQL injection.
What systems are affected by CVE-2025-14223?
CVE-2025-14223 affects the Simple Leave Manager version 1.0 developed by Code-projects.
Can CVE-2025-14223 be exploited remotely?
Yes, CVE-2025-14223 can be exploited remotely, allowing attackers to execute SQL injection through the affected functionality.
What kind of attacks can CVE-2025-14223 facilitate?
CVE-2025-14223 can facilitate SQL injection attacks, which may lead to unauthorized data access and manipulation.