What happened
A flaw has been found in itsourcecode Leave Management System 1.0. This vulnerability affects unknown code of the file /module/leave/controller.php. Executing a manipulation of the argument LEAVEID can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.
Affected versions
Leave Management System: 1.0 Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
SploitusRemote SQL injection in itsourcecode Leave Management System via the LEAVEID parameter.Masuer-mengxing2026-10-10T11:29:06CandidateMasuer-mengxing/CVE-2026-103690Remote SQL injection in itsourcecode Leave Management System via the LEAVEID parameter.Masuer-mengxing2026-10-10T11:29:06CandidateSource timeline
Discovered through SploitusView source ↗
CVE record published by NVDView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.