CVE-2024-46472

The CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection due to the improper neutralization of special elements used in an SQL command. The vulnerability is triggered via the 'email' parameter on the Login Page . This flaw allows an attacker to execute unauthorized SQL querie...

CVE-2024-46470

A Cross Site Scripting (XSS) vulnerability exists in CodeAstro Membership Management System 1.0 . The flaw allows attackers to execute malicious JavaScript bySantizing input via the membership_type field within the edit-type.php component. While the vulnerability is confirmed, the provided docume...

CVE-2024-46471

The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and contents of directories, potentially revealing sensitive information...

CodeAstro Membership Management System security vulnerabilities

CodeAstro Membership Management System is a membership management system from CodeAstro, Inc. A security vulnerability exists in CodeAstro Membership Management System version 1.0, which originates from an easy SQL injection attack via the parameter email on the login page...

CodeAstro Membership Management System security vulnerabilities

CodeAstro Membership Management System is a membership management system from CodeAstro, Inc. A security vulnerability exists in CodeAstro Membership Management System version 1.0, which stems from a cross-site scripting vulnerability that allows an attacker to run malicious JavaScript through th...

PT-2024-32005

Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description The issue exposes the structure and contents of directories in the /uploads/ folder, potentially revealing sensitive information. Recommendations For CodeAstro Membership Managemen...

PT-2024-32004

Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description The issue allows attackers to run malicious JavaScript via the membership type field in the "edit-type.php" component. This enables Cross Site Scripting attacks. Recommendations Fo...

Membership Management System 1.1 SQL Injection

==================================================================================================================================== | Title : Membership Management System 1.1 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64...

CVE-2024-45528

CodeAstro MembershipM-PHP aka Membership Management System in PHP 1.0 allows addmembers.php fullname stored XSS...

CVE-2024-45528

CodeAstro MembershipM-PHP aka Membership Management System in PHP 1.0 allows addmembers.php fullname stored XSS...

CVE-2024-45528

CodeAstro MembershipM-PHP aka Membership Management System in PHP 1.0 allows addmembers.php fullname stored XSS...

PT-2024-31683

Name of the Vulnerable Software and Affected Versions: CodeAstro MembershipM-PHP aka Membership Management System in PHP version 1.0 Description: The issue allows for stored XSS in the fullname parameter of the "add members.php" page. This can lead to malicious script execution when the stored da...

CVE-2024-45528: Improper Neutralization of Input During Web Page Generation

CodeAstro MembershipM-PHP aka Membership Management System in PHP 1.0 allows addmembers.php fullname stored XSS...

CVE-2024-45528

The CodeAstro MembershipM-PHP (also known as Membership Management System in PHP ) version 1.0 is vulnerable to a stored Cross-Site Scripting (XSS) flaw. The vulnerability exists in the add_members.php file, specifically involving the fullname parameter. An attacker can exploit this to perform cr...

CodeAstro Membership Management System security vulnerabilities

CodeAstro Membership Management System is a membership management system from CodeAstro. A security vulnerability exists in CodeAstro Membership Management System version 1.0. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

PHP_CodeAstro_Stored_XSS

Affected Web App: CodeAstro Membership Management System in PHP...

CVE-2024-7912

A vulnerability was found in CodeAstro Online Railway Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/assets/. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely...

CVE-2024-7912

A vulnerability was found in CodeAstro Online Railway Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/assets/. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely...

CVE-2024-7912

CVE-2024-7912 affects CodeAstro Online Railway Reservation System version 1.0. The vulnerability is in the unknown code of the file /admin/assets/ and leads to information disclosure through directory listing. Impact is exposure of information; attack can be initiated remotely with public disclos...

CVE-2024-7912 CodeAstro Online Railway Reservation System assets exposure of information through directory listing

A vulnerability was found in CodeAstro Online Railway Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/assets/. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely...