Lucene search
K

36 matches found

RedhatCVE
RedhatCVE
added 2025/02/04 11:8 p.m.4 views

CVE-2024-0247

A vulnerability classified as critical was found in CodeAstro Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /admin/ of the component Admin Panel. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS9.8AI score0.00045EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/12/31 12:0 a.m.1 views

PT-2024-17915 · Unknown · Codeastro Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: CodeAstro Online Food Ordering System version 1.0 Description: A critical issue has been identified in the CodeAstro Online Food Ordering System, affecting an unknown functionality of the file /admin/update users.php, specifically the Update...

8.8CVSS7.2AI score0.00106EPSS
Exploits1References10
OSV
OSV
added 2024/12/26 9:15 a.m.0 views

CVE-2024-12943

A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ownersignup.php. The manipulation of the argument f/e/p/m/o/n/c/s/ci/a leads to sql injection. The attack can be...

9.8CVSS5.7AI score0.00106EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/12/18 12:0 a.m.1 views

CodeAstro Complaint Management System 安全漏洞

CodeAstro Complaint Management System is a complaint management system from CodeAstro. A security vulnerability exists in CodeAstro Complaint Management System version v1.0, which originates from a remote attacker who can elevate privileges via the mess-view.php component...

8.8CVSS6.9AI score0.00644EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/18 12:0 a.m.6 views

CVE-2024-55506

An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 version with 0 updates enables an attacker to execute arbitrary code and obtain sensitive information via the delete.php file and modifying the id parameter...

7.5AI score0.00157EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/12/18 12:0 a.m.1 views

CodeAstro Complaint Management System 安全漏洞

CodeAstro Complaint Management System is a complaint management system from CodeAstro. A security vulnerability exists in CodeAstro Complaint Management System v1.0, which stems from an IDOR vulnerability that can be exploited to execute arbitrary code and obtain sensitive information by modifyin...

8.8CVSS7.3AI score0.00157EPSS
Exploits1References1
OSV
OSV
added 2024/08/18 7:15 p.m.2 views

CVE-2024-7910

A vulnerability was found in CodeAstro Online Railway Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/emp-profile-avatar.php of the component Profile Photo Update Handler. The manipulation leads to unrestricted upload. The...

7.2CVSS5.4AI score0.00075EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/08/18 12:0 a.m.1 views

PT-2024-38677 · Unknown · Codeastro Online Railway Reservation System

Name of the Vulnerable Software and Affected Versions: CodeAstro Online Railway Reservation System version 1.0 Description: A critical issue was found in the CodeAstro Online Railway Reservation System, affecting some unknown functionality of the file /admin/emp-profile-avatar.php of the componen...

7.2CVSS5.1AI score0.00075EPSS
Exploits1References10
OSV
OSV
added 2024/02/28 10:15 p.m.0 views

CVE-2024-25867

A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the membershipType and membershipAmount parameters in the addtype.php component...

9.1CVSS6.1AI score0.00126EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/02/28 12:0 a.m.1 views

PT-2024-21174 · Unknown · Codeastro Membership Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Membership Management System version 1.0 Description: A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code via the membershipType parameter in the "add type.php" component. This enables the attacker to...

6.1CVSS7AI score0.00197EPSS
Exploits1References7
OSV
OSV
added 2024/01/29 11:15 p.m.1 views

CVE-2024-1022

A vulnerability, which was classified as problematic, was found in CodeAstro Simple Student Result Management System 5.6. This affects an unknown part of the file /addclasses.php of the component Add Class Page. The manipulation of the argument Class Name leads to cross site scripting. It is...

4.8CVSS3.9AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/01/29 12:0 a.m.1 views

PT-2024-16123 · Codeastro · Codeastro Simple Student Result Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Simple Student Result Management System version 5.6 Description: A problematic issue was found in the CodeAstro Simple Student Result Management System. This issue affects the /add classes.php file of the Add Class Page component. T...

4.8CVSS6.6AI score0.00101EPSS
Exploits1References7
CNNVD
CNNVD
added 2024/01/29 12:0 a.m.0 views

CodeAstro Simple Student Result Management System Cross-Site Scripting Vulnerability

Simple Student Result Management System is a student result management system by Farah Kharrat, an individual developer in Germany. A cross-site scripting vulnerability exists in CodeAstro Simple Student Result Management System version 5.6, which is caused by an unknown section of /addclasses.ph...

4.8CVSS6.2AI score0.00101EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/01/09 12:0 a.m.2 views

PT-2024-15479 · Codeastro · Codeastro Simple House Rental System

Name of the Vulnerable Software and Affected Versions: CodeAstro Simple House Rental System version 5.6 Description: A problematic vulnerability was found in the Login Panel component, allowing for cross-site scripting. The attack can be launched remotely. Recommendations: For CodeAstro Simple...

6.1CVSS6.6AI score0.00079EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2023/10/26 12:0 a.m.3 views

PT-2023-32334 · Unknown · Codeastro Pos System

Name of the Vulnerable Software and Affected Versions: CodeAstro POS System version 1.0 Description: A critical issue affects some unknown functionality of the file /setting of the component Logo Handler, leading to unrestricted upload. The attack can be launched remotely. Recommendations: For...

8.8CVSS7.1AI score0.00077EPSS
Exploits1References7
OSV
OSV
added 2023/10/22 11:15 p.m.1 views

CVE-2023-5696

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file pagestransfermoney.php. The manipulation of the argument accountnumber with the input 357146928--alert9206!-- leads to cross site...

6.1CVSS3.8AI score
Exploits0References3
Rows per page
Query Builder