İçeriğe atla
Noroxi

codeastro kayıtları

codeastro üreticisine ait 109 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22
  2. 23
  3. 24
  4. 25
  5. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

109 kayıt
  • CVE-2024-25869
    41Planlayın

    An Unrestricted File Upload vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitra

    YüksekCVSS 8,8İstismar yokEPSS %19

    codeastro · membership management system28 Şub 2024

  • CVE-2024-55509
    39İzleyin

    SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate p

    KritikCVSS 9,8İstismar yokEPSS %1

    codeastro · complaint management system20 Ara 2024

  • CVE-2024-0194
    39İzleyin

    CodeAstro Internet Banking System Profile Picture pages_account.php unrestricted upload

    KritikCVSS 9,8İstismar yokEPSS %1

    codeastro · internet banking system2 Oca 2024

  • CVE-2024-2351
    39İzleyin

    CodeAstro Ecommerce Site Search action.php sql injection

    KritikCVSS 9,8İstismar yokEPSS %1

    codeastro · ecommerce website9 Mar 2024

  • CVE-2025-70150
    39İzleyin

    CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated

    KritikCVSS 9,8İstismar yokEPSS %1

    codeastro · membership management system18 Şub 2026

  • CVE-2024-55507
    39İzleyin

    An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the delete_e.php component.

    KritikCVSS 9,8İstismar yokEPSS %1

    codeastro · complaint management system3 Oca 2025

  • CVE-2024-1824
    39İzleyin

    CodeAstro House Rental Management System signing.php sql injection

    KritikCVSS 9,8İstismar yokEPSS %1

    codeastro · house rental management system23 Şub 2024

  • CVE-2025-25775
    39İzleyin

    Codeastro Bus Ticket Booking System v1.0 is vulnerable to SQL injection via the kodetiket parameter in /BusTicket-CI/tiket/cekorder.

    KritikCVSS 9,8İstismar yokEPSS %1

    codeastro · bus ticket booking system25 Nis 2025

  • CVE-2025-70149
    39İzleyin

    CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parameter.

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    codeastro · membership management system18 Şub 2026

  • CVE-2024-25867
    36İzleyin

    A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL comma

    KritikCVSS 9,1İstismar yokEPSS %1

    codeastro · membership management system28 Şub 2024

  • CVE-2025-29017
    35İzleyin

    A Remote Code Execution (RCE) vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upload validation in the

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    codeastro · internet banking system10 Nis 2025

  • CVE-2024-25866
    35İzleyin

    A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL comma

    YüksekCVSS 8,8İstismar yokEPSS %1

    codeastro · membership management system28 Şub 2024

  • CVE-2023-6773
    35İzleyin

    CodeAstro POS and Inventory Management System User Creation register_account access control

    YüksekCVSS 8,8İstismar yokEPSS %1

    codeastro · pos and inventory management system13 Ara 2023

  • CVE-2024-55506
    35İzleyin

    An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 (version with 0 updates) enables an attacker to execute arbitrary code

    YüksekCVSS 8,8İstismar yokEPSS %1

    codeastro · complaint management system18 Ara 2024

  • CVE-2024-55505
    35İzleyin

    An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component.

    YüksekCVSS 8,8İstismar yokEPSS %1

    codeastro · complaint management system18 Ara 2024

  • CVE-2024-46472
    34İzleyin

    CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page.

    YüksekCVSS 8,6İstismar yokEPSS %0

    codeastro · membership management system27 Eyl 2024

  • CVE-2025-25777
    32İzleyin

    Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles.

    YüksekCVSS 8,0İstismar yokEPSS %0

    codeastro · bus ticket booking system24 Nis 2025

  • CVE-2024-2076
    30İzleyin

    CodeAstro House Rental Management System tenant.php missing authentication

    YüksekCVSS 7,5İstismar yokEPSS %1

    codeastro · house rental management system1 Mar 2024

  • CVE-2024-56889
    30İzleyin

    Incorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    codeastro · complaint management system6 Şub 2025

  • CVE-2024-46471
    30İzleyin

    The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and contents of directories, p

    YüksekCVSS 7,5İstismar yokEPSS %1

    codeastro · membership management system27 Eyl 2024

  • CVE-2024-0543
    30İzleyin

    CodeAstro Real Estate Management System propertydetail.php sql injection

    YüksekCVSS 7,5İstismar yokEPSS %0

    codeastro · real estate management system15 Oca 2024

  • CVE-2025-70148
    30İzleyin

    Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated a

    YüksekCVSS 7,5İstismar yokEPSS %0

    codeastro · membership management system18 Şub 2026

  • CVE-2024-56924
    29İzleyin

    A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking system 2.0.0 allows remote attackers to execute arbitrary J

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    codeastro · internet banking system22 Oca 2025

  • CVE-2022-43085
    28İzleyin

    An arbitrary file upload vulnerability in add_product.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a cra

    YüksekCVSS 7,2İstismar yokEPSS %1

    codeastro · restaurant pos system1 Kas 2022

  • CVE-2024-2333
    28İzleyin

    CodeAstro Membership Management System add_members.php sql injection

    YüksekCVSS 7,2İstismar yokEPSS %1

    codeastro · membership management system9 Mar 2024