Lucene search
K

90 matches found

NVD
NVD
added 2026/05/07 4:16 p.m.7 views

CVE-2026-36387

A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /addmembers.php. This vulnerability affects the file upload functionality, where improper file sanitization allows attackers to inject malicious files which leads RCE...

6.5CVSS0.00114EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/05/07 12:0 a.m.4 views

CVE-2026-36387

A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /addmembers.php. This vulnerability affects the file upload functionality, where improper file sanitization allows attackers to inject malicious files which leads RCE...

5.8AI score0.00114EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/07 12:0 a.m.4 views

CVE-2026-36387

A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /addmembers.php. This vulnerability affects the file upload functionality, where improper file sanitization allows attackers to inject malicious files which leads RCE...

5.8AI score0.00114EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/02/19 1:28 a.m.2 views

CVE-2025-70149

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in printmembershipcard.php via the ID parameter...

9.8CVSS6AI score0.00052EPSS
Exploits1References1
NVD
NVD
added 2026/02/18 6:24 p.m.3 views

CVE-2025-70150

CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in deletemembers.php that allows unauthenticated attackers to delete arbitrary member records via the id parameter...

9.8CVSS0.00479EPSS
Exploits1References2
NVD
NVD
added 2026/02/18 6:24 p.m.2 views

CVE-2025-70148

Missing authentication and authorization in printmembershipcard.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access membership card data of arbitrary users via direct requests with a manipulated id parameter, resulting in insecure direct object reference...

7.5CVSS0.00142EPSS
Exploits1References2
NVD
NVD
added 2026/02/18 5:21 p.m.2 views

CVE-2025-70149

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in printmembershipcard.php via the ID parameter...

9.8CVSS0.00052EPSS
Exploits1References2
CVE
CVE
added 2026/02/18 12:0 a.m.4 views

CVE-2025-70148

CodeAstro Membership Management System 1.0 is affected by an IDOR vulnerability in print_membership_card.php due to missing authentication/authorization. Unauthenticated attackers can access membership card data of arbitrary users by sending direct requests with a manipulated id parameter. CVSSv3...

7.5CVSS5.7AI score0.00142EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2026/02/18 12:0 a.m.4 views

CodeAstro Membership Management System 安全漏洞

The CodeAstro Membership Management System is a member management system developed by CodeAstro Inc. Version 1.0 of the CodeAstro Membership Management System has a security vulnerability. This vulnerability stems from the lack of validation for the ID parameter in the printmembershipcard.php fil...

9.8CVSS5.8AI score0.00052EPSS
Exploits1References2
CVE
CVE
added 2026/02/18 12:0 a.m.5 views

CVE-2025-70150

CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated attackers to delete arbitrary member records via the id parameter. The CVE-2025-70150 entry uses a network-exposed, unauthenticated path with high impact to...

9.8CVSS5.8AI score0.00479EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/18 12:0 a.m.3 views

CVE-2025-70150

CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in deletemembers.php that allows unauthenticated attackers to delete arbitrary member records via the id parameter...

9.8CVSS5.8AI score0.00479EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/02/18 12:0 a.m.2 views

CVE-2025-70148

Missing authentication and authorization in printmembershipcard.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access membership card data of arbitrary users via direct requests with a manipulated id parameter, resulting in insecure direct object reference...

7.5CVSS5.7AI score0.00142EPSS
Exploits1References3
CVE
CVE
added 2026/02/18 12:0 a.m.3 views

CVE-2025-70149

Technical details (affected software, vulnerable component, impact, or fix) are not publicly provided in the supplied documents. Monitor for updates.

9.8CVSS6AI score0.00052EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2026/02/18 12:0 a.m.17 views

CVE-2025-70149

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in printmembershipcard.php via the ID parameter...

0.00052EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/02/18 12:0 a.m.2 views

CodeAstro Membership Management System 安全漏洞

The CodeAstro Membership Management System is a member management system developed by CodeAstro Inc. Version 1.0 of the CodeAstro Membership Management System has security vulnerabilities. These vulnerabilities stem from the lack of authentication and authorization in the printmembershipcard.php...

7.5CVSS5.9AI score0.00142EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/02/18 12:0 a.m.18 views

CVE-2025-70150

CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in deletemembers.php that allows unauthenticated attackers to delete arbitrary member records via the id parameter...

9.8CVSS0.00479EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2026/01/07 9:15 a.m.6 views

CVE-2024-2333

A vulnerability classified as critical has been found in CodeAstro Membership Management System 1.0. Affected is an unknown function of the file /addmembers.php. The manipulation of the argument fullname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

7.2CVSS7.5AI score0.00079EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-27287

Malicious code in bioql PyPI...

7.2CVSS6.6AI score0.00079EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-12556

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00204EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-27113

Malicious code in bioql PyPI...

7.2CVSS5AI score0.00069EPSS
Exploits1References3
Rows per page
Query Builder