CVE-2026-103690 | itsourcecode Leave Management System 1.0 controller.php LEAVEID sql injection (Issue 18)

A vulnerability was found in itsourcecode Leave Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /module/leave/controller.php. Executing a manipulation of the argument LEAVEID can lead to sql injection.

This vulnerability appears as CVE-2026-103690. The attack may be performed from remote. In addition, an exploit is available.VulDB Recent EntriesRead More