Medium severity6.3NVD Advisory· Published Sep 20, 2026

CVE-2026-94032

Description

A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown part of the file /module/department/index.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.

Patches

Vulnerability mechanics

References

github.com/ltranquility/submit_repository/issues/15nvd
itsourcecode.comnvd
vuldb.com/cve/CVE-2026-94032nvd
vuldb.com/submit/946075nvd
vuldb.com/vuln/407960nvd
vuldb.com/vuln/407960/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000