CodeAstro Membership Management System 1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:codeastro:membership_management_system:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Codeastro (f92dc1fe-f2d7-58ad-92b0-40a98a9042be) |
|---|---|
| Product | Membership Management System (0f925848-8b83-57e6-8424-8c65a3c2a549) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-70150 |
vulnerable | 2026-06-08 07:43:16.907562 |
Details available
CRITICAL (9.8)
CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated attackers to delete arbitrary member records via the id parameter.
Published: 2026-02-18T00:00:00.000Z
Updated: 2026-02-18T17:46:15.789Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-70149 |
vulnerable | 2026-06-08 07:43:16.907275 |
Details available
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parameter.
Published: 2026-02-18T00:00:00.000Z
Updated: 2026-02-18T18:28:23.173Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-70148 |
vulnerable | 2026-06-08 07:43:16.906782 |
Details available
HIGH (7.5)
Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access membership card data of arbitrary users via direct requests with a manipulated id parameter, resulting in insecure direct object reference (IDOR).
Published: 2026-02-18T00:00:00.000Z
Updated: 2026-02-19T19:04:32.039Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3998 |
vulnerable | 2026-06-08 07:23:10.282876 |
CodeAstro Membership Management System renew.php sql injection
HIGH (7.3)
A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0. This vulnerability affects unknown code of the file renew.php?id=6. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-28T03:00:05.668Z
Updated: 2025-04-28T18:04:10.700Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-48709 |
vulnerable | 2026-06-08 06:50:09.813115 |
Details available
CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the membershipType parameter in edit_type.php
Published: 2024-10-21T00:00:00.000Z
Updated: 2025-11-25T15:10:48.579Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46472 |
vulnerable | 2026-06-08 06:48:10.091033 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46471 |
vulnerable | 2026-06-08 06:48:10.090730 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46470 |
vulnerable | 2026-06-08 06:48:10.090396 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46236 |
vulnerable | 2026-06-08 06:48:09.959496 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45528 |
vulnerable | 2026-06-08 06:48:06.744528 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2333 |
vulnerable | 2026-06-08 06:33:30.884219 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2149 |
vulnerable | 2026-06-08 06:33:30.432727 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25869 |
vulnerable | 2026-06-08 06:31:23.944425 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25868 |
vulnerable | 2026-06-08 06:31:23.944005 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25867 |
vulnerable | 2026-06-08 06:31:23.943534 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25866 |
vulnerable | 2026-06-08 06:31:23.942997 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1924 |
vulnerable | 2026-06-08 06:27:15.038918 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1819 |
vulnerable | 2026-06-08 06:27:14.605434 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1818 |
vulnerable | 2026-06-08 06:27:14.603925 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.