CVE-2024-56889

The CodeAstro Complaint Management System v1.0 is vulnerable to improper access control in the /admin/m_delete.php endpoint. This flaw allows unauthorized attackers to arbitrarily delete complaints by modifying the id parameter. While a specific patch version is not currently documented, it is re...

CVE-2024-55505

The CodeAstro Complaint Management System v.1.0 is vulnerable to a privilege escalation issue affecting the mess-view.php component. This vulnerability allows a remote attacker to elevate privileges, potentially leading to unauthorized access. The root cause is identified as Improper Control of G...

CVE-2024-55509

The CodeAstro Complaint Management System v.1.0 contains an SQL injection vulnerability within the delete.php component. A remote attacker can exploit the id parameter to execute arbitrary code and escalate privileges. As of the current documentation, no patched version is available. To mitigate ...

CVE-2024-55507

A security vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges through the delete_e.php component. This flaw poses a critical risk, with a CVSS score of 9.8 , potentially leading to unauthorized access. While no patch is currently available...

CVE-2024-55506

The CodeAstro Complaint Management System v1.0 is affected by an Insecure Direct Object Reference (IDOR) vulnerability. By modifying the id parameter within the delete.php file, an attacker can execute arbitrary code and obtain sensitive information . No specific remediation or exploit links are ...