PT-2024-32006

Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description The issue is related to SQL Injection via the parameter email in the Login Page. This allows for potential exploitation. No information is provided about the estimated number of...

PT-2024-32004

Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description The issue allows attackers to run malicious JavaScript via the membership type field in the "edit-type.php" component. This enables Cross Site Scripting attacks. Recommendations Fo...

PT-2024-32005

Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description The issue exposes the structure and contents of directories in the /uploads/ folder, potentially revealing sensitive information. Recommendations For CodeAstro Membership Managemen...

CVE-2024-46472

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page...

CVE-2024-46471: Exposure of Sensitive Information to an Unauthorized Actor

The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and contents of directories, potentially revealing sensitive information...

CVE-2024-46472: Improper Neutralization of Special Elements used in an SQL Command

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page...

CVE-2024-46472

The CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection due to the improper neutralization of special elements used in an SQL command. The vulnerability is triggered via the 'email' parameter on the Login Page . This flaw allows an attacker to execute unauthorized SQL querie...

Membership Management System 1.1 SQL Injection

==================================================================================================================================== | Title : Membership Management System 1.1 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64...

CVE-2024-45528

CodeAstro MembershipM-PHP aka Membership Management System in PHP 1.0 allows addmembers.php fullname stored XSS...

CodeAstro Membership Management System 安全漏洞

CodeAstro Membership Management System is a membership management system from CodeAstro. A security vulnerability exists in CodeAstro Membership Management System version 1.0. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

CVE-2024-45528

CodeAstro MembershipM-PHP aka Membership Management System in PHP 1.0 allows addmembers.php fullname stored XSS...

CVE-2024-45528

The CodeAstro MembershipM-PHP (also known as Membership Management System in PHP ) version 1.0 is vulnerable to a stored Cross-Site Scripting (XSS) flaw. The vulnerability exists in the add_members.php file, specifically involving the fullname parameter. An attacker can exploit this to perform cr...

PT-2024-31683

Name of the Vulnerable Software and Affected Versions: CodeAstro MembershipM-PHP aka Membership Management System in PHP version 1.0 Description: The issue allows for stored XSS in the fullname parameter of the "add members.php" page. This can lead to malicious script execution when the stored da...

CVE-2024-45528: Improper Neutralization of Input During Web Page Generation

CodeAstro MembershipM-PHP aka Membership Management System in PHP 1.0 allows addmembers.php fullname stored XSS...

CVE-2024-45528

CodeAstro MembershipM-PHP aka Membership Management System in PHP 1.0 allows addmembers.php fullname stored XSS...

PHP_CodeAstro_Stored_XSS

Affected Web App: CodeAstro Membership Management System in PHP...

CVE-2024-7912

A vulnerability was found in CodeAstro Online Railway Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/assets/. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely...

CVE-2024-7912

A vulnerability was found in CodeAstro Online Railway Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/assets/. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely...

CVE-2024-7912

CVE-2024-7912 affects CodeAstro Online Railway Reservation System version 1.0. The vulnerability is in the unknown code of the file /admin/assets/ and leads to information disclosure through directory listing. Impact is exposure of information; attack can be initiated remotely with public disclos...

CVE-2024-7912 CodeAstro Online Railway Reservation System assets exposure of information through directory listing

A vulnerability was found in CodeAstro Online Railway Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/assets/. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely...