CodeAstro

Records206All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical12CVSS 9.0–10.0

CVSS high22CVSS 7.0–8.9

Exploited now

CodeAstro records in CISA KEV

No CodeAstro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Membership Management System 19 records HIGH Real Estate Management System 19 records HIGH Gym Management System 11 records HIGH Complaint Management System 5 records HIGH House Rental Management System 5 records HIGH Internet Banking System 5 records HIGH Pos And Inventory Management System 4 records MEDIUM Simple Banking System 4 records HIGH

Records

5 records in Complaint Management System · all components

TI-2024-36856 CVE-2024-55509 · GHSA-j5cm-9jc4-f88x

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a…

HIGH 82

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00817 Published 2024-12-20 No fix listed CWE-89

TI-2024-36855 CVE-2024-55507 · GHSA-h735-q6rm-hjcj

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to…

HIGH 82

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the delete_e.php component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00628 Published 2025-01-03 No fix listed CWE-281

TI-2024-36854 CVE-2024-55506 · GHSA-pjh7-rccm-x9qh

An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 (version with 0…

HIGH 73

An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 (version with 0 updates) enables an attacker to execute arbitrary code and obtain sensitive information via the delete.php file and modifying the id p…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00704 Published 2024-12-18 No fix listed CWE-639

TI-2024-36853 CVE-2024-55505 · GHSA-r566-6rjj-gpgw

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to…

HIGH 73

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00696 Published 2024-12-18 No fix listed CWE-94

TI-2024-37694 CVE-2024-56889 · GHSA-9vjw-9rq2-r5r7

Incorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint…

HIGH 72

Incorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modification of the id parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00692 Published 2025-02-06 No fix listed CWE-284

Open these records in search →

Critical	12
High	22
Medium	172
Low	0
No CVSS	0