MEDIUM

CVE-2026-92364

2026-09-16 CVSS v3.1

CVSS

6.3

Description

A vulnerability has been found in itsourcecode Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /module/employee/index.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Weakness (CWE)

CWE-74 Injection

CWE-89 SQL Injection

EPSS Score

0.32%

Probability of exploitation in next 30 days

25.1th percentile

References

https://github.com/KissPrincess/OguriCap/issues/1 https://itsourcecode.com/ https://vuldb.com/cve/CVE-2026-92364 https://vuldb.com/submit/934982 https://vuldb.com/vuln/405450 https://vuldb.com/vuln/405450/cti

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE