5 matches found
PT-2024-21175 · Unknown · Codeastro Membership Management System
Name of the Vulnerable Software and Affected Versions: CodeAstro Membership Management System version 1.0 Description: An Unrestricted File Upload issue allows a remote attacker to execute arbitrary code via upload of a crafted php file in the settings.php component. Recommendations: For CodeAstr...
Sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...
CVE-2023-5260
The CVE-2023-5260 issue affects SourceCodester Simple Membership System 1.0, specifically the group_validator.php file where manipulating the club_id argument causes SQL injection. Documents indicate the attack can be initiated remotely and that exploits have been publicly disclosed. Connected so...
CVE-2023-4846
A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file deletemember.php. The manipulation of the argument memid leads to sql injection. The attack may be initiated remotely. The exploit has be...
CVE-2023-4846
CVE-2023-4846 affects SourceCodester Simple Membership System 1.0. The vulnerability is a SQL injection in the file delete_member.php, caused by manipulating the mem_id argument. It can be exploited remotely and has been publicly disclosed. Multiple sources describe this as a critical issue with ...