Threats tagged 'ghsa-gggm-v39x-cpg8'

CodeAstro Leave Management System 1.0 contains a SQL injection vulnerability in the /login.php file via the txt_username parameter. This vulnerability allows remote attackers to manipulate SQL queries, potentially leading to unauthorized data access or modification. Public exploit code is available, increasing the risk of exploitation. The vulnerability has a high severity score of 7.3 (CVSS 3.1).