Lucene search
K

1283 matches found

CNNVD
CNNVD
added 2025/04/04 12:0 a.m.2 views

CodeAstro Car Rental System 安全漏洞

CodeAstro Car Rental System is a car rental system from CodeAstro. A security vulnerability exists in CodeAstro Car Rental System version 1.0, which stems from an incorrect manipulation of the parameter ID that can lead to SQL injection...

9.8CVSS6.9AI score0.00198EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/04/04 12:0 a.m.2 views

PT-2025-14831 · Unknown · Codeastro Car Rental System

Name of the Vulnerable Software and Affected Versions: CodeAstro Car Rental System version 1.0 Description: A critical issue has been found in the CodeAstro Car Rental System, affecting some unknown functionality of the file /returncar.php. The manipulation of the ID argument leads to SQL...

9.8CVSS7AI score0.00198EPSS
Exploits1References11
Positive Technologies
Positive Technologies
added 2025/04/04 12:0 a.m.3 views

PT-2025-14832 · Unknown · Codeastro Student Grading System

Name of the Vulnerable Software and Affected Versions: CodeAstro Student Grading System version 1.0 Description: A critical issue was found in the CodeAstro Student Grading System, affecting an unknown part of the file studentsubject.php. The manipulation of the studentId argument leads to SQL...

8.8CVSS6.9AI score0.00198EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2025/02/25 12:0 a.m.2 views

PT-2025-7941 · Codeastro · Bus Ticket Booking System

Name of the Vulnerable Software and Affected Versions: Codeastro Bus Ticket Booking System version 1.0 Description: The issue concerns a SQL injection vulnerability via the kodetiket parameter in the "/BusTicket-CI/tiket/cekorder" API endpoint. This allows for potential exploitation. No informati...

9.8CVSS7.1AI score0.00093EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2025/02/08 6:51 a.m.5 views

CVE-2024-56889

Incorrect access control in the endpoint /admin/mdelete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modification of the id parameter...

7.5CVSS6.8AI score0.03356EPSS
Exploits1References1
NVD
NVD
added 2025/02/06 10:15 p.m.10 views

CVE-2024-56889

Incorrect access control in the endpoint /admin/mdelete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modification of the id parameter...

7.5CVSS0.03356EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/02/06 12:0 a.m.6 views

CVE-2024-56889

Incorrect access control in the endpoint /admin/mdelete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modification of the id parameter...

6.9AI score0.03356EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/02/06 12:0 a.m.3 views

PT-2025-5882 · Codeastro · Codeastro Complaint Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Complaint Management System version 1.0 Description: The issue concerns incorrect access control in the endpoint "/admin/m delete.php" that allows unauthorized attackers to delete complaints arbitrarily by modifying the id parameter...

7.5CVSS6.6AI score0.03356EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/02/06 12:0 a.m.8 views

CVE-2024-56889

Incorrect access control in the endpoint /admin/mdelete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modification of the id parameter...

0.03356EPSS
Exploits1References1
CVE
CVE
added 2025/02/06 12:0 a.m.73 views

CVE-2024-56889

CVE-2024-56889 affects CodeAstro Complaint Management System v1.0. The vulnerability is an Incorrect access control on the endpoint /admin/m_delete.php, allowing an unauthorized attacker to arbitrarily delete complaints by modifying the id parameter. The CVSS 3.1 base score is 7.5 (High) with Net...

7.5CVSS6.9AI score0.03356EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2025/02/06 12:0 a.m.2 views

CodeAstro Complaint Management System 安全漏洞

CodeAstro Complaint Management System is a complaint management system from CodeAstro. A security vulnerability exists in CodeAstro Complaint Management System version v1.0, which originates from incorrect access control on the /admin/mdelete.php page...

7.5CVSS6.7AI score0.03356EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:34 a.m.4 views

CVE-2024-12943

A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ownersignup.php. The manipulation of the argument f/e/p/m/o/n/c/s/ci/a leads to sql injection. The attack can be...

9.8CVSS7.2AI score0.00106EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 10:22 a.m.5 views

CVE-2024-12944

A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /signin.php. The manipulation of the argument u/p leads to sql injection. The attack may be launched remotely. The exploit has...

9.8CVSS7.2AI score0.00106EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:39 a.m.2 views

CVE-2024-1824

A vulnerability, which was classified as critical, has been found in CodeAstro House Rental Management System 1.0. Affected by this issue is some unknown functionality of the file signing.php. The manipulation of the argument uname/password leads to sql injection. The attack may be launched...

9.8CVSS7.4AI score0.00044EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 11:57 p.m.9 views

CVE-2024-13038

A vulnerability was found in CodeAstro Simple Loan Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be...

9.8CVSS7.4AI score0.00093EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/04 11:8 p.m.5 views

CVE-2024-0247

A vulnerability classified as critical was found in CodeAstro Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /admin/ of the component Admin Panel. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS9.8AI score0.00045EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/01/22 12:0 a.m.2 views

CodeAstro Internet Banking System 跨站请求伪造漏洞

CodeAstro Internet Banking System is a PHP online banking system from CodeAstro. A security vulnerability exists in CodeAstro Internet Banking System version 2.0.0. An attacker can exploit this vulnerability by executing arbitrary JavaScript on the administration page pagesaccount to change accou...

7.3CVSS6.6AI score0.00105EPSS
Exploits2References2
OSV
OSV
added 2025/01/03 4:15 p.m.2 views

CVE-2024-55507

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the deletee.php component...

9.8CVSS5.8AI score0.0066EPSS
Exploits1References1
NVD
NVD
added 2025/01/03 4:15 p.m.12 views

CVE-2024-55507

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the deletee.php component...

9.8CVSS0.0066EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/01/03 12:0 a.m.5 views

PT-2025-3123 · Codeastro · Codeastro Complaint Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Complaint Management System version 1.0 Description: The issue allows a remote attacker to escalate privileges via the delete e.php component. Recommendations: For CodeAstro Complaint Management System version 1.0, consider disablin...

9.8CVSS6.5AI score0.0066EPSS
Exploits1References7
Rows per page
Query Builder