CVE-2024-1818

CVE-2024-1818 affects CodeAstro Membership Management System 1.0, specifically the Logo Handler’s /uploads/ area. A vulnerability in an unknown function within that directory allows unrestricted file uploads, with remote exploitation and the exploit publicly disclosed. Impact is described as unre...

CVE-2024-1819

CodeAstro Membership Management System 1.0 is affected in the Add Members Tab. The issue arises from manipulating the Member Photo argument, enabling unrestricted uploads. The vulnerability can be triggered remotely and has publicly disclosed exploit information. Documentation in connected source...

CVE-2024-25869

The CodeAstro Membership Management System in PHP v.1.0 is affected by an Unrestricted File Upload vulnerability in the settings.php component. A remote attacker can exploit this flaw by uploading a crafted PHP file , leading to arbitrary code execution . While specific exploit links are not prov...

CVE-2024-1924

CodeAstro Membership Management System 1.0 contains a SQL injection vulnerability in get_membership_amount.php via the membershipTypeId parameter. The flaw allows remote exploitation and has been publicly disclosed. Affected component is reported as an unspecified area within get_membership_amoun...

CVE-2024-25868

The CodeAstro Membership Management System (PHP v.1.0) contains a Cross-Site Scripting (XSS) vulnerability within the add_type.php component. A remote attacker can exploit this by providing malicious input via the membershipType parameter, which allows for the execution of arbitrary code. This fl...

CVE-2024-25867

The CodeAstro Membership Management System (PHP v.1.0) is vulnerable to a SQL Injection vulnerability within the add_type.php component. A remote attacker can execute arbitrary SQL commands by exploiting the membershipType and membershipAmount parameters. This flaw allows for the manipulation of ...

CVE-2024-25866

A SQL Injection vulnerability exists in CodeAstro Membership Management System in PHP v.1.0 . The flaw resides in the index.php component, where a remote attacker can execute arbitrary SQL commands by manipulating the email parameter. This vulnerability allows for the manipulation of database que...

CVE-2025-3998

CVE-2025-3998 affects CodeAstro Membership Management System 1.0. The vulnerability is an SQL injection in the renew.php?id=6 endpoint caused by improper handling of the ID parameter, exploitable remotely. Public disclosures exist across multiple feeds. There is no documented patched version in t...

CVE-2024-2333

CodeAstro Membership Management System 1.0 is affected by CVE-2024-2333 due to an SQL injection in the /add_members.php file where manipulation of the fullname parameter enables remote exploitation. Multiple sources (NVD, Red Hat, CVE lists, and third-party advisories) confirm the issue and publi...

CVE-2024-2149

CVE-2024-2149 affects CodeAstro Membership Management System 1.0, specifically the code path in settings.php where the currency parameter can be manipulated to trigger SQL injection. The vulnerability is remote(attack vector: network) with high impact on confidentiality, integrity, and availabili...

CVE-2024-46236

CodeAstro Membership Management System v1.0 is vulnerable to Cross-Site Scripting (XSS) . The flaw exists in the address parameter of the add_members.php and edit_member.php files. This vulnerability allows for improper neutralization of input during web page generation. No specific remediation d...

CVE-2024-48709

CodeAstro Membership Management System v1.0 is vulnerable to Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. The flaw specifically exists in the membershipType parameter within the edit_type.php file, which may allow for the injection of maliciou...

CVE-2024-45528

The CodeAstro MembershipM-PHP (also known as Membership Management System in PHP ) version 1.0 is vulnerable to a stored Cross-Site Scripting (XSS) flaw. The vulnerability exists in the add_members.php file, specifically involving the fullname parameter. An attacker can exploit this to perform cr...

CVE-2024-46470

A Cross Site Scripting (XSS) vulnerability exists in CodeAstro Membership Management System 1.0 . The flaw allows attackers to execute malicious JavaScript bySantizing input via the membership_type field within the edit-type.php component. While the vulnerability is confirmed, the provided docume...

CVE-2024-46471

The CodeAstro Membership Management System 1.0 is vulnerable to a Directory Listing flaw in the /uploads/ folder. This vulnerability allows an unauthorized actor to view the structure and contents of the directory, which may result in the disclosure of sensitive information . Exploitation details...

CVE-2024-46472

The CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection due to the improper neutralization of special elements used in an SQL command. The vulnerability is triggered via the 'email' parameter on the Login Page . This flaw allows an attacker to execute unauthorized SQL querie...

CVE-2025-70148

CodeAstro Membership Management System 1.0 is affected by an IDOR vulnerability in print_membership_card.php due to missing authentication/authorization. Unauthenticated attackers can access membership card data of arbitrary users by sending direct requests with a manipulated id parameter. CVSSv3...

CVE-2025-70150

CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated attackers to delete arbitrary member records via the id parameter. The CVE-2025-70150 entry uses a network-exposed, unauthenticated path with high impact to...

CVE-2025-70149

CodeAstro Membership Management System 1.0 is vulnerable to a critical SQL Injection vulnerability in the print_membership_card.php file. The root cause is a lack of validation for the ID parameter , which allows an attacker to execute unauthorized SQL commands. This vulnerability has a CVSS scor...