CVE-2025-70149-SQL-Injection

CVE-2025-70149 — Proyecto de investigación de inyección SQL Descripción general Proyecto de investigación de seguridad que demuestra la explotación y mitigación de CVE-2025-70149, una vulnerabilidad crítica de inyección SQL CVSS 9.8/10 en CodeAstro Membership Management System v1.0. Detalles de C...

CVE-2026-86267

A security vulnerability has been detected in itsourcecode Information System Society Membership System 1.0. This issue affects some unknown processing of the file /society/checkstudent.php. The manipulation of the argument studentid leads to sql injection. Remote exploitation of the attack is...

CVE-2026-86267

itsourcecode Information System Society Membership System 1.0 is vulnerable to SQL injection through the student_id argument in /society/check_student.php . The vulnerability allows remote exploitation with low privileges required and no user interaction. CVSS 3.1 rates it 6.3 (MEDIUM) with low i...

CVE-2026-86267 itsourcecode Information System Society Membership System check_student.php sql injection

A security vulnerability has been detected in itsourcecode Information System Society Membership System 1.0. This issue affects some unknown processing of the file /society/checkstudent.php. The manipulation of the argument studentid leads to sql injection. Remote exploitation of the attack is...

CVE-2026-86267 itsourcecode Information System Society Membership System check_student.php sql injection

A security vulnerability has been detected in itsourcecode Information System Society Membership System 1.0. This issue affects some unknown processing of the file /society/checkstudent.php. The manipulation of the argument studentid leads to sql injection. Remote exploitation of the attack is...

EUVD-2026-72243

A security vulnerability has been detected in itsourcecode Information System Society Membership System 1.0. This issue affects some unknown processing of the file /society/checkstudent.php. The manipulation of the argument studentid leads to sql injection. Remote exploitation of the attack is...

CVE-2026-86267: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Information System Society Membership System 1.0. This issue affects some unknown processing of the file /society/checkstudent.php. The manipulation of the argument studentid leads to sql injection. Remote exploitation of the attack is...

PT-2026-86623

Name of the Vulnerable Software and Affected Versions itsourcecode Information System Society Membership System version 1.0 Description An issue exists in the processing of the '/society/check student.php' endpoint. Manipulation of the student id parameter allows for remote SQL injection, which...

CVE-2025-69936

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /editmember.php?id=1...

CVE-2025-69934

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...

CVE-2025-69937

CodeAstro Membership Management System version 1.0 is vulnerable to SQL Injection in the edit_type.php endpoint via the id parameter. This vulnerability allows for the insertion of malicious SQL statements into entry fields for execution, which can lead to unauthorized access to the underlying da...

EUVD-2025-210558

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /printmembershipcard.php?id=1...

CVE-2025-69935

The CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection within the report.php and revenue_report.php files. The vulnerability is triggered via the fromDate parameter, allowing for the improper neutralization of special elements used in SQL commands. This issue can lead to un...

CVE-2025-69938

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType...

EUVD-2025-210554

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /editmember.php?id=1...

CodeAstro Membership Management System 代码问题漏洞

The CodeAstro Membership Management System is a member management system developed by CodeAstro Inc. Version 1.0 of the CODEASTRO Membership Management System has code-related vulnerabilities. These vulnerabilities stem from the file upload functionality in the /addmembers.php file. Improper...

PT-2026-38449

A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /add members.php. This vulnerability affects the file upload functionality, where improper file sanitization allows attackers to inject malicious files which leads RCE...

CVE-2026-36387

A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /addmembers.php. This vulnerability affects the file upload functionality, where improper file sanitization allows attackers to inject malicious files which leads RCE...

CVE-2026-5198

A vulnerability was determined in code-projects Student Membership System 1.0. The impacted element is an unknown function of the file /admin/index.php of the component Admin Login. This manipulation of the argument username/password causes sql injection. Remote exploitation of the attack is...

CVE-2026-5195

A flaw has been found in code-projects Student Membership System 1.0. This issue affects some unknown processing of the component User Registration Handler. Executing a manipulation can lead to sql injection. The attack can be launched remotely...