CVE-2026-102912Medium· 4.7▾ SunlitA vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument date_start/date_end leads to sql injection…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 25.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument date_start/date_end leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-102913High· 7.3SourceCodester Car Driving School Management System Master.php save_enrollment sql injection
CVE-2026-102910High· 7.3A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0
CVE-2026-102909High· 7.3A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0
CVE-2026-102908High· 7.3A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0
CVE-2026-95926High· 7.3A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0
CVE-2026-95927High· 7.3A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0