Lucene search
+L

1558 matches found

Cvelist
Cvelist
added 5 days ago29 views

CVE-2025-69933

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /memberProfile.php?id=1...

0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 5 days ago29 views

CVE-2025-69931

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembership.php?id=1...

0.00143EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 5 days ago6 views

PT-2026-66586

Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description SQL Injection occurs in the 'edit type.php' endpoint through the id parameter. SQL Injection is a technique where malicious SQL statements are inserted into entry fields for...

9.8CVSS5.7AI score0.0026EPSS
SaveExploits0References3
EUVD
EUVD
added 5 days ago8 views

EUVD-2025-210552

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edittype.php endpoint via the Parameter id...

6AI score0.0026EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago7 views

CVE-2025-69935

The CVE-2025-69935 entry concerns CodeAstro Membership Management System 1.0, with a SQL Injection vulnerability in report.php and revenue_report.php exploitable via the fromDate parameter. The provided metrics show CVSS 3.1 base score 9.8 (CRITICAL) with network attack vector, no privileges or u...

9.8CVSS6AI score0.0026EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago17 views

CVE-2025-69938

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the membershipType parameter. CVSS 3.1 base score 9.8 (CRITICAL) with network access, low attack complexity, no privileges, and user interaction not required. Impact is high for confidentiality, integrity, ...

9.8CVSS6AI score0.0026EPSS
SaveExploits0References1
EUVD
EUVD
added 5 days ago8 views

EUVD-2025-210565

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType...

6AI score0.0026EPSS
SaveExploits0References1
EUVD
EUVD
added 5 days ago8 views

EUVD-2025-210554

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /editmember.php?id=1...

6AI score0.0026EPSS
SaveExploits0References1
CVE
CVE
added 5 days ago6 views

CVE-2025-69930

CodeAstro Membership Management System 1.0 is affected by a SQL Injection vulnerability in print_membership_card.php?id=1. The associated CVE (CVE-2025-69930) has a CVSS v3.1 base score of 9.8 (CRITICAL) with network access, low attack complexity, no privileges required, and no user interaction, ...

9.8CVSS6AI score0.0026EPSS
SaveExploits0References1
EUVD
EUVD
added 5 days ago8 views

EUVD-2025-210557

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembership.php?id=1...

6AI score0.00143EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/24 12:32 a.m.7 views

EUVD-2026-48444

A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unknown functionality of the file /OnlineClassroom/loginlinkadmin.php. Executing a manipulation of the argument aid can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS5.4AI score0.00263EPSS
SaveExploits0References7
NVD
NVD
added 2026/07/23 10:16 p.m.11 views

CVE-2026-16765

A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unknown functionality of the file /OnlineClassroom/loginlinkadmin.php. Executing a manipulation of the argument aid can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00263EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/23 9:45 p.m.15 views

CVE-2026-16765

CodeAstro Online Classroom 1.0 contains a vulnerability in the file /OnlineClassroom/loginlinkadmin.php where manipulating the argument aid can trigger an SQL injection. The issue can be exploited remotely without authentication, and public exploit guidance exists. Affected component: loginlinkad...

7.5CVSS7.2AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/23 9:45 p.m.34 views

CVE-2026-16765 CodeAstro Online Classroom loginlinkadmin.php sql injection

A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unknown functionality of the file /OnlineClassroom/loginlinkadmin.php. Executing a manipulation of the argument aid can lead to sql injection. The attack can be executed remotely. The exploit has been...

7.5CVSS0.00263EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/23 12:0 a.m.19 views

PT-2026-64189

Name of the Vulnerable Software and Affected Versions CodeAstro Online Classroom version 1.0 Description Remote SQL injection is possible due to improper handling of the aid argument within the '/OnlineClassroom/loginlinkadmin.php' endpoint. SQL injection is a technique where an attacker inserts...

7.5CVSS7.2AI score0.00263EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/07/13 12:0 p.m.8 views

CVE-2026-15559

A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component POST Handler. Performing a manipulation of the argument appid results in sql injection. The attack is possible to be...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2026/07/13 12:0 p.m.18 views

CVE-2026-15559

CodeAstro Simple Online Leave Management System 1.0 contains a SQL injection vulnerability in the POST handler: /SimpleOnlineLeave/admin/accept.php, caused by manipulating the argument appid. This allows remote exploitation and is publicly available. The CVE documents do not provide patch/version...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/13 11:30 a.m.19 views

CVE-2026-15558

CodeAstro Simple Online Leave Management System 1.0 is affected by CVE-2026-15558. The vulnerability resides in /admin/deletemp.php where manipulation of the ID parameter leads to SQL injection. The issue allows remote exploitation, and public exploit disclosure increases risk. The CVSS metrics i...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/13 3:16 a.m.10 views

CVE-2026-15523

A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLeave/admin/dashboard.php. This manipulation of the argument Name causes sql injection. The attack can be initiated remotely. The...

6.5CVSS0.002EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/13 2:0 a.m.7 views

CVE-2026-15523

A weakness has been identified in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLeave/admin/dashboard.php. This manipulation of the argument Name causes sql injection. The attack can be initiated remotely. The...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder