Lucene search
+L

1885 matches found

Positive Technologies
Positive Technologies
•added 2024/10/21 12:00 a.m.•7 views

PT-2024-33189

Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description The issue is related to Cross Site Scripting XSS via the membershipType parameter in the "edit type.php" file. This allows for potential malicious script injection. Recommendations...

5.4CVSS5.9AI score0.00324EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/21 12:00 a.m.•7 views

CVE-2024-48709: Improper Neutralization of Input During Web Page Generation

CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting XSS via the membershipType parameter in edittype.php...

5.4CVSS5.8AI score0.00324EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/21 12:00 a.m.•5 views

CVE-2024-46236: Improper Neutralization of Input During Web Page Generation

CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting XSS via the address parameter in addmembers.php and editmember.php...

5.4CVSS5.8AI score0.00296EPSS
SaveExploits1References1
OSV
OSV
•added 2024/09/27 3:15 p.m.•19 views

CVE-2024-46471

The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and contents of directories, potentially revealing sensitive information...

7.5CVSS5.8AI score0.00502EPSS
SaveExploits1References2
OSV
OSV
•added 2024/09/27 3:15 p.m.•14 views

CVE-2024-46470

Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membershiptype field in the edit-type.php component...

6.1CVSS5.8AI score0.00353EPSS
SaveExploits1References2
OSV
OSV
•added 2024/09/27 3:15 p.m.•11 views

CVE-2024-46472

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page...

8.6CVSS5.8AI score0.00437EPSS
SaveExploits1References2
NVD
NVD
•added 2024/09/27 3:15 p.m.•21 views

CVE-2024-46472

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page...

8.6CVSS0.00437EPSS
SaveExploits1References2
NVD
NVD
•added 2024/09/27 3:15 p.m.•41 views

CVE-2024-46470

Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membershiptype field in the edit-type.php component...

6.1CVSS0.00353EPSS
SaveExploits1References2
NVD
NVD
•added 2024/09/27 3:15 p.m.•40 views

CVE-2024-46471

The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and contents of directories, potentially revealing sensitive information...

7.5CVSS0.00502EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/09/27 12:00 a.m.•15 views

CodeAstro Membership Management System 安全漏洞

CodeAstro Membership Management System is a membership management system from CodeAstro, Inc. A security vulnerability exists in CodeAstro Membership Management System version 1.0, which stems from a cross-site scripting vulnerability that allows an attacker to run malicious JavaScript through th...

6.1CVSS6.1AI score0.00353EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/09/27 12:00 a.m.•16 views

CodeAstro Membership Management System 安全漏洞

CodeAstro Membership Management System is a membership management system from CodeAstro, Inc. A security vulnerability exists in CodeAstro Membership Management System version 1.0, which originates from a directory listing in the folder /uploads/ that exposes the directory's structure and content...

7.5CVSS6.7AI score0.00502EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/09/27 12:00 a.m.•5 views

PT-2024-32005

Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description The issue exposes the structure and contents of directories in the /uploads/ folder, potentially revealing sensitive information. Recommendations For CodeAstro Membership Managemen...

7.5CVSS5.7AI score0.00502EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2024/09/27 12:00 a.m.•37 views

CVE-2024-46470

Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membershiptype field in the edit-type.php component...

0.00353EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/09/27 12:00 a.m.•44 views

CVE-2024-46471

The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and contents of directories, potentially revealing sensitive information...

0.00502EPSS
SaveExploits1References2
CVE
CVE
•added 2024/09/27 12:00 a.m.•80 views

CVE-2024-46470

A Cross Site Scripting (XSS) vulnerability exists in CodeAstro Membership Management System 1.0 . The flaw allows attackers to execute malicious JavaScript bySantizing input via the membership_type field within the edit-type.php component. While the vulnerability is confirmed, the provided docume...

6.1CVSS6.6AI score0.00353EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/27 12:00 a.m.•14 views

CVE-2024-46472

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page...

8AI score0.00437EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/09/27 12:00 a.m.•18 views

CVE-2024-46470

Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membershiptype field in the edit-type.php component...

6.6AI score0.00353EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/09/27 12:00 a.m.•22 views

CVE-2024-46471

The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and contents of directories, potentially revealing sensitive information...

7AI score0.00502EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/27 12:00 a.m.•6 views

CVE-2024-46470: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membershiptype field in the edit-type.php component...

6.1CVSS5.8AI score0.00353EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/09/27 12:00 a.m.•11 views

CodeAstro Membership Management System 安全漏洞

CodeAstro Membership Management System is a membership management system from CodeAstro, Inc. A security vulnerability exists in CodeAstro Membership Management System version 1.0, which originates from an easy SQL injection attack via the parameter email on the login page...

8.6CVSS7.9AI score0.00437EPSS
SaveExploits1References3
Rows per page
Query Builder