CVE-2026-13549: Authorization Bypass Through User-Controlled Key

A security flaw has been discovered in CodeAstro Complaint Management System 1.0. The affected element is the function deletereport of the file application/controllers/Report.php of the component Report Endpoint. The manipulation results in authorization bypass. The attack can be executed remotel...

EUVD-2024-52783

Malicious code in bioql PyPI...

EUVD-2024-52781

Malicious code in bioql PyPI...

EUVD-2024-52782

Malicious code in bioql PyPI...

CVE-2024-55507

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the deletee.php component...

CVE-2024-55505

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component...

CVE-2024-56889

The CodeAstro Complaint Management System v1.0 is vulnerable to an incorrect access control flaw in the /admin/m_delete.php endpoint. This vulnerability allows unauthorized attackers to arbitrarily delete complaints by modifying the id parameter. As of the current reporting, there is no informati...

CVE-2024-56889

Incorrect access control in the endpoint /admin/mdelete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modification of the id parameter...

CVE-2024-56889: Improper Access Control

Incorrect access control in the endpoint /admin/mdelete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modification of the id parameter...

CVE-2024-55507

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the deletee.php component...

CVE-2024-55507

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the deletee.php component...

PT-2025-3123 · Codeastro · Codeastro Complaint Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Complaint Management System version 1.0 Description: The issue allows a remote attacker to escalate privileges via the delete e.php component. Recommendations: For CodeAstro Complaint Management System version 1.0, consider disablin...

CVE-2024-55507: Improper Preservation of Permissions

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the deletee.php component...

CVE-2024-55507

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the deletee.php component...

CVE-2024-55507

A security vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges through the delete_e.php component. This flaw poses a critical risk, with a CVSS score of 9.8 , potentially leading to unauthorized access. While no patch is currently available...

CVE-2024-55509

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component...

CVE-2024-55509

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component...

CVE-2024-55509: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component...

CVE-2024-55509

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component...

CVE-2024-55509

The CodeAstro Complaint Management System v.1.0 contains an SQL injection vulnerability within the delete.php component. A remote attacker can exploit the id parameter to execute arbitrary code and escalate privileges. As of the current documentation, no patched version is available. To mitigate ...