A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. Th...
Vendor
codeastro vulnerabilities
209 published CVES affecting codeastro, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 209
- Critical
- 12
- High
- 24
- Medium
- 172
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Products
- Membership Management System 19
- real estate management system 19
- Internet Banking System 14
- online classroom 14
- gym management system 11
- apartment visitor management system 9
- hospital management system 8
- complaint management system 7
- human resource management system 7
- leave management system 7
- online job portal 6
- ecommerce website 5
- House Rental Management System 5
- Online Railway Reservation System 5
- student attendance management system 5
- Online Food Ordering System 4
- POS and Inventory Management System 4
- restaurant pos system 4
- Simple Banking System 4
- simple online leave management system 4
- bus ticket booking system 3
- Patient Record Management System 3
- payroll system 3
- simple inventory system 3
- simple pharmacy management system 3
- Car Rental System 2
- Expense Management System 2
- food ordering system 2
- ingredients stock management system 2
- Online Leave Application 2
Latest codeastro CVEs
Newest publication first · page 4 of 9
-
MediumCVSS 6.9 EPSS 0.42%
-
MediumCVSS 5.3 EPSS 0.31%
A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been...
-
MediumCVSS 5.1 EPSS 0.40%
A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been public...
-
MediumCVSS 5.1 EPSS 0.37%
A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing a manipulation of the argument id/ini_weight results in sql injection. The attack may be initiated remotely. T...
-
MediumCVSS 5.3 EPSS 0.45%
A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been...
-
MediumCVSS 5.3 EPSS 0.33%
A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendance.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The...
-
MediumCVSS 5.3 EPSS 0.34%
A weakness has been identified in SourceCodester Simple Inventory System 1.0. Impacted is an unknown function of the file /user.php. This manipulation of the argument uemail causes sql injection. The attack is possible to be carried out remotely. The exploit has been made availab...
-
MediumCVSS 5.3 EPSS 0.34%
A security flaw has been discovered in SourceCodester Simple Inventory System 1.0. This issue affects some unknown processing of the file /brand.php. The manipulation of the argument editBrandName results in sql injection. The attack can be executed remotely. The exploit has been...
-
MediumCVSS 5.3 EPSS 0.34%
A flaw has been found in CodeAstro Gym Management System 1.0. This vulnerability affects unknown code of the file /admin/actions/delete-equipment.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published a...
-
MediumCVSS 5.3 EPSS 0.39%
A vulnerability was detected in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/edit-equipmentform.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit is now public and may be use...
-
MediumCVSS 5.3 EPSS 0.34%
A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/actions/delete-member.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely....
-
MediumCVSS 5.3 EPSS 0.34%
A weakness has been identified in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/equipment-entry.php. Executing a manipulation of the argument ename can lead to sql injection. It is possible to launch the attack...
-
MediumCVSS 5.3 EPSS 0.39%
A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/user-payment.php. Performing a manipulation of the argument plan results in sql injection. It is possible to initiate the attack remotely. The exploit ha...
-
MediumCVSS 5.3 EPSS 0.34%
A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from remote. The exploit is publicly available a...
-
MediumCVSS 5.3 EPSS 0.34%
A security vulnerability has been detected in code-projects Simple Banking System 1.0. The affected element is an unknown function of the file /transfermoney.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploi...
-
MediumCVSS 5.3 EPSS 0.34%
A weakness has been identified in code-projects Simple Banking System 1.0. Impacted is an unknown function of the file /removeuser.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to...
-
MediumCVSS 5.3 EPSS 0.34%
A security flaw has been discovered in code-projects Simple Banking System 1.0. This issue affects some unknown processing of the file /createuser.php. Performing manipulation of the argument Name results in sql injection. The attack may be initiated remotely. The exploit has bee...
-
MediumCVSS 6.9 EPSS 0.48%
A vulnerability was identified in CodeAstro Student Grading System 1.0. This issue affects some unknown processing of the file /adminLogin.php. Such manipulation of the argument staffId leads to sql injection. The attack may be performed from remote. The exploit is publicly avail...
-
MediumCVSS 5.3 EPSS 0.39%
A flaw has been found in CodeAstro Online Leave Application 1.0. Affected by this vulnerability is an unknown functionality of the file /leaveAplicationForm.php. Executing manipulation of the argument absence[] can lead to sql injection. The attack may be launched remotely. The e...
-
MediumCVSS 5.3 EPSS 0.39%
A vulnerability was detected in CodeAstro Online Leave Application 1.0. Affected is an unknown function of the file /signup.php. Performing manipulation of the argument city results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used....
-
MediumCVSS 5.3 EPSS 0.36%
A vulnerability was detected in CodeAstro Electricity Billing System 1.0. Affected by this issue is some unknown functionality of the file /admin/bill.php. The manipulation of the argument uid results in sql injection. The attack may be launched remotely. The exploit is now publi...
-
MediumCVSS 5.3 EPSS 0.34%
A vulnerability was determined in CodeAstro Simple Pharmacy Management 1.0. This affects an unknown function of the file /view.php. This manipulation of the argument bar_code causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclo...
-
CVE-2025-9942 CodeAstro Real Estate Management System submitproperty.php unrestricted upload
PublishedMediumCVSS 5.3 EPSS 0.51%A vulnerability has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /submitproperty.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and ma...
-
MediumCVSS 5.3 EPSS 0.51%
A flaw has been found in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the file /register.php. Executing manipulation of the argument uimage can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and...
-
MediumCVSS 5.1 EPSS 0.30%
A vulnerability was detected in CodeAstro Real Estate Management System 1.0. This affects an unknown function of the file /feature.php. Performing manipulation of the argument msg results in cross site scripting. The attack can be initiated remotely. The exploit is now public and...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.