CodeAstro

Records206All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical12CVSS 9.0–10.0

CVSS high22CVSS 7.0–8.9

Exploited now

CodeAstro records in CISA KEV

No CodeAstro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Membership Management System 19 records HIGH Real Estate Management System 19 records HIGH Gym Management System 11 records HIGH Complaint Management System 5 records HIGH House Rental Management System 5 records HIGH Internet Banking System 5 records HIGH Pos And Inventory Management System 4 records MEDIUM Simple Banking System 4 records HIGH

Records

5 records in Internet Banking System · all components

TI-2024-00176 CVE-2024-0194 · GHSA-4r33-2453-cxc5

CodeAstro Internet Banking System Profile Picture pages_account.php unrestricted upload

HIGH 75

A vulnerability, which was classified as critical, has been found in CodeAstro Internet Banking System up to 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00738 Published 2024-01-02 No fix listed CWE-434

TI-2025-20959 CVE-2025-29017 · GHSA-q4c4-rh4g-6cxf

A Remote Code Execution (RCE) vulnerability exists in Code Astro Internet Banking System…

HIGH 73

A Remote Code Execution (RCE) vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upload validation in the profile_pic parameter within pages_view_client.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.009 Published 2025-04-10 No fix listed CWE-434

TI-2024-37708 CVE-2024-56924 · GHSA-rj2q-jjmp-m73j

A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking system…

HIGH 67

A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking system 2.0.0 allows remote attackers to execute arbitrary JavaScript on the admin page (pages_account), potentially leading to unauthorized…

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.0046 Published 2025-01-22 No fix listed CWE-352

TI-2025-20958 CVE-2025-29015 · GHSA-fchw-5m8f-5fmf

Code Astro Internet Banking System 2.0.0 is vulnerable to Cross Site Scripting (XSS) via…

MEDIUM 60

Code Astro Internet Banking System 2.0.0 is vulnerable to Cross Site Scripting (XSS) via the name parameter in /admin/pages_account.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00304 Published 2025-04-17 No fix listed CWE-79

TI-2025-20960 CVE-2025-29018 · GHSA-q8gq-3hw2-45xc

A Stored Cross-Site Scripting (XSS) vulnerability exists in the name parameter of…

MEDIUM 55

A Stored Cross-Site Scripting (XSS) vulnerability exists in the name parameter of pages_add_acc_type.php in Code Astro Internet Banking System 2.0.0.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00278 Published 2025-04-09 No fix listed CWE-79

Open these records in search →