Lucene search
K

1297 matches found

CVE
CVE
added 2024/10/21 12:0 a.m.57 views

CVE-2024-46236

The CVE-2024-46236 entry concerns CodeAstro Membership Management System v1.0, which is vulnerable to Cross-Site Scripting (XSS) via the address parameter in add_members.php and edit_member.php. Root cause is likely improper sanitization/encoding of user-supplied address input in these scripts, e...

5.4CVSS6.2AI score0.00282EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2024/10/21 12:0 a.m.15 views

CVE-2024-46236

CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting XSS via the address parameter in addmembers.php and editmember.php...

0.00282EPSS
Exploits1References1
NVD
NVD
added 2024/09/27 3:15 p.m.23 views

CVE-2024-46470

Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membershiptype field in the edit-type.php component...

6.1CVSS0.00193EPSS
Exploits1References2
OSV
OSV
added 2024/09/27 3:15 p.m.2 views

CVE-2024-46471

The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and contents of directories, potentially revealing sensitive information...

7.5CVSS5.8AI score0.0018EPSS
Exploits1References2
OSV
OSV
added 2024/09/27 3:15 p.m.2 views

CVE-2024-46470

Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membershiptype field in the edit-type.php component...

6.1CVSS5.8AI score0.00193EPSS
Exploits1References2
NVD
NVD
added 2024/09/27 3:15 p.m.20 views

CVE-2024-46471

The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and contents of directories, potentially revealing sensitive information...

7.5CVSS0.0018EPSS
Exploits1References2
NVD
NVD
added 2024/09/27 3:15 p.m.8 views

CVE-2024-46472

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page...

8.6CVSS0.00058EPSS
Exploits1References2
OSV
OSV
added 2024/09/27 3:15 p.m.1 views

CVE-2024-46472

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page...

8.6CVSS5.8AI score0.00058EPSS
Exploits1References2
CVE
CVE
added 2024/09/27 12:0 a.m.46 views

CVE-2024-46472

CVE-2024-46472 affects CodeAstro Membership Management System 1.0. The vulnerability is a SQL Injection in the login page triggered by the parameter email . CVSS states a network attack with no user interaction, requiring no privileges, and results in Confidentiality Impact: High and Integrity/Av...

8.6CVSS8.1AI score0.00058EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2024/09/27 12:0 a.m.15 views

CVE-2024-46471

The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and contents of directories, potentially revealing sensitive information...

0.0018EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/09/27 12:0 a.m.2 views

CodeAstro Membership Management System 安全漏洞

CodeAstro Membership Management System is a membership management system from CodeAstro, Inc. A security vulnerability exists in CodeAstro Membership Management System version 1.0, which stems from a cross-site scripting vulnerability that allows an attacker to run malicious JavaScript through th...

6.1CVSS6.1AI score0.00193EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/09/27 12:0 a.m.11 views

CVE-2024-46470

Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membershiptype field in the edit-type.php component...

0.00193EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/09/27 12:0 a.m.13 views

CVE-2024-46470

Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membershiptype field in the edit-type.php component...

6.6AI score0.00193EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/09/27 12:0 a.m.1 views

CodeAstro Membership Management System 安全漏洞

CodeAstro Membership Management System is a membership management system from CodeAstro, Inc. A security vulnerability exists in CodeAstro Membership Management System version 1.0, which originates from a directory listing in the folder /uploads/ that exposes the directory's structure and content...

7.5CVSS6.7AI score0.0018EPSS
Exploits1References3
CVE
CVE
added 2024/09/27 12:0 a.m.54 views

CVE-2024-46470

CVE-2024-46470 affects CodeAstro Membership Management System 1.0. The vulnerability is a Cross Site Scripting (XSS) flaw in the edit-type.php component, triggered via the membership_type field. Reported by multiple sources, the issue allows an attacker to execute malicious JavaScript in the cont...

6.1CVSS6.6AI score0.00193EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/27 12:0 a.m.13 views

CVE-2024-46471

The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and contents of directories, potentially revealing sensitive information...

7AI score0.0018EPSS
Exploits1References2
CVE
CVE
added 2024/09/27 12:0 a.m.50 views

CVE-2024-46471

CVE-2024-46471 affects CodeAstro Membership Management System 1.0, where directory listing in the /uploads/ folder exposes the structure and contents of directories. Root cause described as directory listing vulnerability leading to potential exposure of sensitive information. Impact is stated as...

7.5CVSS6.9AI score0.0018EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2024/09/27 12:0 a.m.1 views

CodeAstro Membership Management System 安全漏洞

CodeAstro Membership Management System is a membership management system from CodeAstro, Inc. A security vulnerability exists in CodeAstro Membership Management System version 1.0, which originates from an easy SQL injection attack via the parameter email on the login page...

8.6CVSS7.9AI score0.00058EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/09/27 12:0 a.m.9 views

CVE-2024-46472

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page...

0.00058EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/09/27 12:0 a.m.9 views

CVE-2024-46472

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page...

8AI score0.00058EPSS
Exploits1References2
Rows per page
Query Builder