196 matches found
CVE-2025-69930
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /printmembershipcard.php?id=1...
CVE-2025-69930: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /printmembershipcard.php?id=1...
CVE-2025-69938: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType...
CVE-2025-69931: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembership.php?id=1...
CVE-2025-69937
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edittype.php endpoint via the Parameter id...
PT-2026-66580
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /print membership card.php?id=1...
PT-2026-66586
Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description SQL Injection occurs in the 'edit type.php' endpoint through the id parameter. SQL Injection is a technique where malicious SQL statements are inserted into entry fields for...
CVE-2025-69934: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...
EUVD-2025-210552
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edittype.php endpoint via the Parameter id...
PT-2026-66585
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit member.php?id=1...
PT-2026-66583
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /delete members.php?id=1...
CVE-2025-69931
The CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the /delete_membership.php?id=1 endpoint. This vulnerability, identified as CVE-2025-69931 , stems from the improper neutralization of special elements used in an SQL command. The impact is rated as CRITICAL with a C...
CVE-2025-69937: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edittype.php endpoint via the Parameter id...
CVE-2025-69935: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...
CVE-2025-69936: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /editmember.php?id=1...
EUVD-2025-210565
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType...
CVE-2025-69933: Improper Neutralization of Special Elements used in an SQL Command
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /memberProfile.php?id=1...
CVE-2026-36387
A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /addmembers.php. This vulnerability affects the file upload functionality, where improper file sanitization allows attackers to inject malicious files which leads RCE...
CVE-2026-36387: Unrestricted Upload of File with Dangerous Type
A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /addmembers.php. This vulnerability affects the file upload functionality, where improper file sanitization allows attackers to inject malicious files which leads RCE...
CVE-2026-36387
A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /addmembers.php. This vulnerability affects the file upload functionality, where improper file sanitization allows attackers to inject malicious files which leads RCE...