138 matches found
CVE-2025-70149-SQL-Injection
CVE-2025-70149 — Proyecto de investigación de inyección SQL Descripción general Proyecto de investigación de seguridad que demuestra la explotación y mitigación de CVE-2025-70149, una vulnerabilidad crítica de inyección SQL CVSS 9.8/10 en CodeAstro Membership Management System v1.0. Detalles de C...
CVE-2025-69933
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /memberProfile.php?id=1...
CVE-2025-69934
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...
CVE-2025-69937
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edittype.php endpoint via the Parameter id...
CVE-2025-69936
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /editmember.php?id=1...
CVE-2025-69930
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /printmembershipcard.php?id=1...
CVE-2025-69930: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /printmembershipcard.php?id=1...
CVE-2025-69933
The CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection within the /memberProfile.php?id=1 endpoint. This vulnerability allows for the improper neutralization of special elements used in an SQL command. While technical details regarding the specific root cause or remediation...
CVE-2025-69934
The CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection within the /delete_members.php?id=1 endpoint. The vulnerability is caused by the improper neutralization of special elements used in an SQL command. Exploitation can lead to high impact consequences regarding confidenti...
CVE-2025-69931: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembership.php?id=1...
CVE-2025-69934
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...
CVE-2025-69938: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType...
CVE-2025-69931
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembership.php?id=1...
CVE-2025-69933
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /memberProfile.php?id=1...
CVE-2025-69937
CodeAstro Membership Management System version 1.0 is vulnerable to SQL Injection in the edit_type.php endpoint via the id parameter. This vulnerability allows for the insertion of malicious SQL statements into entry fields for execution, which can lead to unauthorized access to the underlying da...
CVE-2025-69938
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType...
CVE-2025-69934
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...
CVE-2025-69935
CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...
CVE-2025-69934: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...