Lucene search
+L

1885 matches found

Cvelist
Cvelist
•added 2026/07/30 12:00 a.m.•55 views

CVE-2025-69930

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /printmembershipcard.php?id=1...

0.00319EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/30 12:00 a.m.•20 views

CVE-2025-69934

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...

5.8AI score0.00319EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/30 12:00 a.m.•53 views

CVE-2025-69935

CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...

0.00319EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/30 12:00 a.m.•48 views

CVE-2025-69935

The CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection within the report.php and revenue_report.php files. The vulnerability is triggered via the fromDate parameter, allowing for the improper neutralization of special elements used in SQL commands. This issue can lead to un...

9.8CVSS5.8AI score0.00319EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/30 12:00 a.m.•55 views

CVE-2025-69934

The CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection within the /delete_members.php?id=1 endpoint. The vulnerability is caused by the improper neutralization of special elements used in an SQL command. Exploitation can lead to high impact consequences regarding confidenti...

9.8CVSS5.8AI score0.00319EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/24 12:32 a.m.•24 views

EUVD-2026-48444

A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unknown functionality of the file /OnlineClassroom/loginlinkadmin.php. Executing a manipulation of the argument aid can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS5.4AI score0.00431EPSS
SaveExploits0References7
NVD
NVD
•added 2026/07/23 10:16 p.m.•27 views

CVE-2026-16765

A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unknown functionality of the file /OnlineClassroom/loginlinkadmin.php. Executing a manipulation of the argument aid can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00431EPSS
SaveExploits0References6
CVE
CVE
•added 2026/07/23 9:45 p.m.•45 views

CVE-2026-16765

CodeAstro Online Classroom 1.0 contains a vulnerability in the file /OnlineClassroom/loginlinkadmin.php where manipulating the argument aid can trigger an SQL injection. The issue can be exploited remotely without authentication, and public exploit guidance exists. Affected component: loginlinkad...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/07/23 9:45 p.m.•52 views

CVE-2026-16765 CodeAstro Online Classroom loginlinkadmin.php sql injection

A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unknown functionality of the file /OnlineClassroom/loginlinkadmin.php. Executing a manipulation of the argument aid can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00431EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/07/23 9:45 p.m.•25 views

CVE-2026-16765

A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unknown functionality of the file /OnlineClassroom/loginlinkadmin.php. Executing a manipulation of the argument aid can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS5.4AI score0.00431EPSS
SaveExploits0References6Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/23 9:45 p.m.•23 views

CVE-2026-16765 CodeAstro Online Classroom loginlinkadmin.php sql injection

A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unknown functionality of the file /OnlineClassroom/loginlinkadmin.php. Executing a manipulation of the argument aid can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•35 views

PT-2026-64189

Name of the Vulnerable Software and Affected Versions CodeAstro Online Classroom version 1.0 Description Remote SQL injection is possible due to improper handling of the aid argument within the '/OnlineClassroom/loginlinkadmin.php' endpoint. SQL injection is a technique where an attacker inserts...

7.5CVSS7.2AI score0.00431EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/23 12:00 a.m.•7 views

CVE-2026-16765: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unknown functionality of the file /OnlineClassroom/loginlinkadmin.php. Executing a manipulation of the argument aid can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References3
NVD
NVD
•added 2026/07/13 1:16 p.m.•27 views

CVE-2026-15559

A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component POST Handler. Performing a manipulation of the argument appid results in sql injection. The attack is possible to be...

6.5CVSS0.00333EPSS
SaveExploits0References6
NVD
NVD
•added 2026/07/13 12:16 p.m.•25 views

CVE-2026-15558

A security vulnerability has been detected in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLeave/admin/deletemp.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed...

6.5CVSS0.00333EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/07/13 12:00 p.m.•21 views

CVE-2026-15559

A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component POST Handler. Performing a manipulation of the argument appid results in sql injection. The attack is possible to be...

6.5CVSS6.4AI score0.00333EPSS
SaveExploits0References6Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/13 12:00 p.m.•17 views

CVE-2026-15559 CodeAstro Simple Online Leave Management System POST accept.php sql injection

A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component POST Handler. Performing a manipulation of the argument appid results in sql injection. The attack is possible to be...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/07/13 12:00 p.m.•24 views

EUVD-2026-43490

A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component POST Handler. Performing a manipulation of the argument appid results in sql injection. The attack is possible to be...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6
CVE
CVE
•added 2026/07/13 12:00 p.m.•52 views

CVE-2026-15559

CodeAstro Simple Online Leave Management System 1.0 contains a SQL injection vulnerability in the POST handler: /SimpleOnlineLeave/admin/accept.php, caused by manipulating the argument appid. This allows remote exploitation and is publicly available. The CVE documents do not provide patch/version...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/07/13 12:00 p.m.•70 views

CVE-2026-15559 CodeAstro Simple Online Leave Management System POST accept.php sql injection

A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component POST Handler. Performing a manipulation of the argument appid results in sql injection. The attack is possible to be...

6.5CVSS0.00333EPSS
SaveExploits0References6
Rows per page
Query Builder