CVE-2026-104625

A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulation of the argument gname results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

EUVD-2026-91650

A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulation of the argument gname results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

CVE-2026-104625

A security flaw exists in CodeAstro Simple Loan Management System 1.0 within an unknown function of the /admin/index.php file. An attacker can perform a remote SQL injection by manipulating the g_name argument. Public exploits are available and may be used to conduct attacks. No specific remediat...

CVE-2026-104614

A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown processing of the file /SimplePharmacy-PHP/product/delete.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is public...

CVE-2026-104613

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been public...

EUVD-2026-91647

A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown processing of the file /SimplePharmacy-PHP/product/delete.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is public...

CVE-2026-104614

A SQL injection vulnerability exists in CodeAstro Simple Pharmacy Management System 1.0 . The flaw is located in the /SimplePharmacy-PHP/product/delete.php file, where improper processing of the ID argument allows for remote exploitation. An exploit is currently publicly available and may be used...

CVE-2026-104614 CodeAstro Simple Pharmacy Management System delete.php sql injection

A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown processing of the file /SimplePharmacy-PHP/product/delete.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is public...

CVE-2026-104613

The CodeAstro Simple Pharmacy Management System 1.0 is vulnerable to an SQL injection vulnerability within the /SimplePharmacy-PHP/product/view.php file. The root cause is the improper manipulation of the ID argument , which allows for remote execution of the attack. The exploit has been publicly...

EUVD-2026-91632

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been public...

CVE-2026-104613 CodeAstro Simple Pharmacy Management System view.php sql injection

A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been public...

CVE-2026-37749

CVE-2026-37749 — CodeAstro Simple Attendance Management System 1.0 - SQLインジェクション 詳細 フィールド| 情報 ---|--- CVE ID| CVE-2026-37749 タイプ| SQLインジェクション → 認証バイパス 深刻度| Critical CVSSv3: 9.8 ベンダー| CodeAstro 製品| Simple Attendance Management System バージョン| 1.0 発見者| Varad AP Mene 日付| 2026-04-16 CWE| CWE-89 説明...

CVE-2026-7071-access-Control

CodeAstro 온라인 구인 포털PHP MySQL의 인증되지 않은 이력서 노출 세부 정보 공급업체: CodeAstro 제품: PHP MySQL 기반 온라인 구인 포털 프로젝트 버전: 1.0 취약점 유형: 부적절한 접근 제어 / 정보 공개 CWE: CWE-284, CWE-200, CWE-548 영향을 받는 엔드포인트: /users/user-cvs/ 영향: 모든 사용자 이력서에 대한 인증되지 않은 접근 설명 이 애플리케이션은 사용자 이력서를 인증 또는 권한 부여 검사를 적용하지 않고 공개적으로 접근 가능한...

CVE-2026-7028-SQLI

CodeAstro-Online-Job-Portal-SQLi-Delete-All 세부 정보 공급업체: CodeAstro 제품: Online Job Portal Project in PHP MySQL 버전: 1.0 취약점 유형: SQL 인젝션 CWE: CWE-89 영향을 받는 엔드포인트: /admin/jobs-admins/delete-jobs.php 파라미터: id GET 영향: 데이터베이스의 모든 채용 공고 레코드 삭제 가능 설명 CodeAstro Online Job Portal의 관리자 채용 공고 삭제 기능에서 SQL 인젝션...

CVE-2026-6201-IDOR

CodeAstro 온라인 구인 포털의 취약한 접근 제어로 인한 임의 채용 공고 삭제 가능 세부 정보 공급업체: CodeAstro 제품: PHP MySQL 기반 온라인 구인 포털 프로젝트 버전: 1.0 취약점 유형: 취약한 접근 제어 IDOR CWE: CWE-639 영향을 받는 파일: /jobs/job-delete.php 매개변수: id GET 영향: 인증된 고용주가 요청의 id 매개변수를 조작하여 다른 고용주의 채용 공고를 삭제할 수 있습니다. 설명 CodeAstro가 개발한 PHP MySQL 기반 온라인 구인 포털 프로젝트는...

CVE-2025-70149-SQL-Injection

CVE-2025-70149 — SQL 인젝션 연구 프로젝트 개요 CVE-2025-70149의 익스플로잇 및 완화 방법을 시연하는 보안 연구 프로젝트로, CodeAstro Membership Management System v1.0의 치명적인 SQL 인젝션 취약점CVSS 9.8/10입니다. CVE 세부 정보 항목| 값 ---|--- CVE ID| CVE-2025-70149 CVSS Score| 9.8 CRITICAL 유형| SQL 인젝션 CWE-89 인증 필요| 없음 실습 환경 구성 공격자: Kali Linux...

CVE-2026-94048

A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulation of the argument roleid results in improper privilege management. The attack can be executed remotely. The exploit is...

CVE-2026-94048 CodeAstro QR Code Attendance Management System UserController.php save privileges management

A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulation of the argument roleid results in improper privilege management. The attack can be executed remotely. The exploit is...

CVE-2026-94048 CodeAstro QR Code Attendance Management System UserController.php save privileges management

A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulation of the argument roleid results in improper privilege management. The attack can be executed remotely. The exploit is...

CVE-2026-94048

CodeAstro QR Code Attendance Management System 1.0 is affected by an improper privilege management vulnerability in the Save function of app/Controllers/UserController.php. Manipulation of the role_id argument allows a remote, authenticated user with high privileges to escalate access, with a sco...