CVE-2024-25867

The CodeAstro Membership Management System (PHP v.1.0) is vulnerable to a SQL Injection vulnerability within the add_type.php component. A remote attacker can execute arbitrary SQL commands by exploiting the membershipType and membershipAmount parameters. This flaw allows for the manipulation of ...