Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
CodeastroMembership Management System

7 matches found

CVE
CVE•added 2024/02/27 5:15 p.m.•85 views

CVE-2024-1924

A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the file /get_membership_amount.php. The manipulation of the argument membershipTypeId leads to sql injection. It is possible to initiate the attack remotely....

6.5CVSS6.3AI score0.00038EPSS
CVE
CVE•added 2024/02/28 10:15 p.m.•84 views

CVE-2024-25867

A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the membershipType and membershipAmount parameters in the add_type.php component.

9.1CVSS8.7AI score0.00126EPSS
CVE
CVE•added 2024/02/28 10:15 p.m.•84 views

CVE-2024-25868

A Cross Site Scripting (XSS) vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary code via the membershipType parameter in the add_type.php component.

6.1CVSS6.4AI score0.00258EPSS
CVE
CVE•added 2024/02/28 10:15 p.m.•83 views

CVE-2024-25869

An Unrestricted File Upload vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary code via upload of a crafted php file in the settings.php component.

8.8CVSS7.8AI score0.56013EPSS
CVE
CVE•added 2024/02/23 3:15 p.m.•82 views

CVE-2024-1818

A vulnerability was found in CodeAstro Membership Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /uploads/ of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The explo...

7.2CVSS4.8AI score0.00054EPSS
CVE
CVE•added 2024/02/23 3:15 p.m.•79 views

CVE-2024-1819

A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the component Add Members Tab. The manipulation of the argument Member Photo leads to unrestricted upload. It is possible to initiate the attack remotely. The...

7.2CVSS4.9AI score0.00054EPSS
CVE
CVE•added 2024/02/28 10:15 p.m.•75 views

CVE-2024-25866

A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the email parameter in the index.php component.

8.8CVSS8.7AI score0.00563EPSS