5 matches found
CVE-2025-69934: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...
CVE-2025-70150: Missing Authorization
CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in deletemembers.php that allows unauthenticated attackers to delete arbitrary member records via the id parameter...
CVE-2025-2039 code-projects Blood Bank Management System delete_members.php sql injection
A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/deletemembers.php. The manipulation of the argument memberid leads to sql injection. It is possible to launch the attack remotely. The exploi...
CVE-2025-2039: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/deletemembers.php. The manipulation of the argument memberid leads to sql injection. It is possible to launch the attack remotely. The exploi...
CVE-2024-40488: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF vulnerability was found in the Kashipara Live Membership System v1.0. This could lead to an attacker tricking the administrator into deleting valid member data via a crafted HTML page, as demonstrated by a Delete Member action at the /deletemembers.php...