Codeastro Membership Management System
19 CVEs affecting Codeastro Membership Management System. Latest disclosed: 2026-02-18. Critical: 3, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-70150 | Critical | 9.8 | 2026-02-18 | CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated attackers to delet… |
CVE-2025-70149 | Critical | 9.8 | 2026-02-18 | CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parameter. |
CVE-2024-25867 | Critical | 9.1 | 2024-02-28 | A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the members… |
CVE-2024-25869 | High | 8.8 | 2024-02-28 | An Unrestricted File Upload vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary code via upload… |
CVE-2024-25866 | High | 8.8 | 2024-02-28 | A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the email p… |
CVE-2024-46472 | High | 8.6 | 2024-09-27 | CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page. |
CVE-2025-70148 | High | 7.5 | 2026-02-18 | Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access… |
CVE-2024-46471 | High | 7.5 | 2024-09-27 | The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and contents of directories, potentially revealin… |
CVE-2025-3998 | High | 7.3 | 2025-04-28 | A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0. This vulnerability affects unknown code of the file renew.php?i… |
CVE-2024-2333 | Medium | 6.3 | 2024-03-09 | A vulnerability classified as critical has been found in CodeAstro Membership Management System 1.0. Affected is an unknown function of the file /add_members.p… |
CVE-2024-1924 | Medium | 6.3 | 2024-02-27 | A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the file /get_memb… |
CVE-2024-46470 | Medium | 6.1 | 2024-09-27 | Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membership_type field in… |
CVE-2024-25868 | Medium | 6.1 | 2024-02-28 | A Cross Site Scripting (XSS) vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary code via the me… |
CVE-2024-48709 | Medium | 5.4 | 2024-10-21 | CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the membershipType parameter in edit_type.php |
CVE-2024-46236 | Medium | 5.4 | 2024-10-21 | CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the address parameter in add_members.php and edit_member.php. |
CVE-2024-45528 | Medium | 5.4 | 2024-09-02 | CodeAstro MembershipM-PHP (aka Membership Management System in PHP) 1.0 allows add_members.php fullname stored XSS. |
CVE-2024-2149 | Medium | 4.7 | 2024-03-03 | A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0. This vulnerability affects unknown code of the file settings.ph… |
CVE-2024-1819 | Medium | 4.7 | 2024-02-23 | A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the component Add… |
CVE-2024-1818 | Medium | 4.7 | 2024-02-23 | A vulnerability was found in CodeAstro Membership Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the… |