CVE-2024-1818

CVE-2024-1818 affects CodeAstro Membership Management System 1.0, specifically the Logo Handler’s /uploads/ area. A vulnerability in an unknown function within that directory allows unrestricted file uploads, with remote exploitation and the exploit publicly disclosed. Impact is described as unre...

CVE-2024-1819

CodeAstro Membership Management System 1.0 is affected in the Add Members Tab. The issue arises from manipulating the Member Photo argument, enabling unrestricted uploads. The vulnerability can be triggered remotely and has publicly disclosed exploit information. Documentation in connected source...

CVE-2024-25869

The CodeAstro Membership Management System (PHP v.1.0) contains an unrestricted file upload vulnerability in the settings.php component. This flaw allows a remote attacker to execute arbitrary code by uploading a specially crafted php file . To mitigate this risk, it is recommended to disable fil...

CVE-2024-1924

CodeAstro Membership Management System 1.0 contains a SQL injection vulnerability in get_membership_amount.php via the membershipTypeId parameter. The flaw allows remote exploitation and has been publicly disclosed. Affected component is reported as an unspecified area within get_membership_amoun...

CVE-2024-25868

A Cross Site Scripting (XSS) vulnerability exists in CodeAstro Membership Management System in PHP v.1.0 . The flaw originates from the improper neutralization of input in the add_type.php component, specifically via the membershipType parameter. A remote attacker can exploit this to execute arbi...

CVE-2024-25867

A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the membershipType and membershipAmount parameters in the add_type.php component.

CVE-2024-25866

A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the email parameter in the index.php component.

CVE-2024-2333

CodeAstro Membership Management System 1.0 is affected by CVE-2024-2333 due to an SQL injection in the /add_members.php file where manipulation of the fullname parameter enables remote exploitation. Multiple sources (NVD, Red Hat, CVE lists, and third-party advisories) confirm the issue and publi...

CVE-2025-3998

CVE-2025-3998 affects CodeAstro Membership Management System 1.0. The vulnerability is an SQL injection in the renew.php?id=6 endpoint caused by improper handling of the ID parameter, exploitable remotely. Public disclosures exist across multiple feeds. There is no documented patched version in t...

CVE-2024-2149

CVE-2024-2149 affects CodeAstro Membership Management System 1.0, specifically the code path in settings.php where the currency parameter can be manipulated to trigger SQL injection. The vulnerability is remote(attack vector: network) with high impact on confidentiality, integrity, and availabili...

CVE-2024-46236

CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the address parameter in add_members.php and edit_member.php.

CVE-2024-48709

CodeAstro Membership Management System v1.0 is vulnerable to Cross-Site Scripting (XSS) . The flaw exists in the edit_type.php file due to the improper neutralization of input provided via the membershipType parameter. Exploitation details are not provided in the documents.

CVE-2024-46470

Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membership_type field in the edit-type.php component.

CVE-2024-45528

CodeAstro MembershipM-PHP (aka Membership Management System in PHP) 1.0 allows add_members.php fullname stored XSS.

CVE-2024-46471

The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and contents of directories, potentially revealing sensitive information.

CVE-2024-46472

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page.

CVE-2025-70148

CodeAstro Membership Management System 1.0 is affected by an IDOR vulnerability in print_membership_card.php due to missing authentication/authorization. Unauthenticated attackers can access membership card data of arbitrary users by sending direct requests with a manipulated id parameter. CVSSv3...

CVE-2025-70150

CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated attackers to delete arbitrary member records via the id parameter. The CVE-2025-70150 entry uses a network-exposed, unauthenticated path with high impact to...

CVE-2025-70149

CodeAstro Membership Management System 1.0 is vulnerable to a critical SQL Injection vulnerability in the print_membership_card.php file. The root cause is a lack of validation for the ID parameter , which allows an attacker to execute unauthorized SQL commands. This vulnerability has a CVSS scor...