CVE-2024-55505

The CVE-2024-55505 entry concerns CodeAstro Complaint Management System v1.0. A vulnerability in the mess-view.php component allows a remote attacker to escalate privileges. The issue is repeatedly described across sources as a privilege-escalation in CodeAstro CMS 1.0, with no explicit root-caus...

CVE-2024-55506

The provided connected sources confirm CVE-2024-55506 affects CodeAstro’s Complaint Management System v1.0, where an IDOR flaw in delete.php allows an attacker to modify the id parameter and execute arbitrary code, potentially exposing sensitive information. Affected element: the delete.php endpo...