codeastro vulnerabilities

Products

• Membership Management System 19
• real estate management system 19
• Internet Banking System 14
• online classroom 14
• gym management system 11
• apartment visitor management system 9
• hospital management system 8
• complaint management system 7
• human resource management system 7
• leave management system 7
• online job portal 6
• ecommerce website 5
• House Rental Management System 5
• Online Railway Reservation System 5
• student attendance management system 5
• Online Food Ordering System 4
• POS and Inventory Management System 4
• restaurant pos system 4
• Simple Banking System 4
• simple online leave management system 4
• bus ticket booking system 3
• Patient Record Management System 3
• payroll system 3
• simple inventory system 3
• simple pharmacy management system 3
• Car Rental System 2
• Expense Management System 2
• food ordering system 2
• ingredients stock management system 2
• Online Leave Application 2

Latest codeastro CVEs

Newest publication first · page 9 of 9

1. CVE-2023-5699 CodeAstro Internet Banking System pages_view_client.php cross site scripting

   Published 2023-10-22

   Medium·CVSS 6.1 EPSS 0.56%

   A vulnerability, which was classified as problematic, has been found in CodeAstro Internet Banking System 1.0. This issue affects some unknown processing of the file pages_view_client.php. The manipulation of the argument acc_name with the input Johnnie Reyes'"()&%<zzz><ScRiPt >a...

2. CVE-2023-5698 CodeAstro Internet Banking System pages_deposit_money.php cross site scripting

   Published 2023-10-22

   Medium·CVSS 6.1 EPSS 0.56%

   A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. This vulnerability affects unknown code of the file pages_deposit_money.php. The manipulation of the argument account_number with the input 421873905--><ScRiPt%20>alert(9523)</ScRiPt><!-...

3. CVE-2023-5697 CodeAstro Internet Banking System pages_withdraw_money.php cross site scripting

   Published 2023-10-22

   Medium·CVSS 6.1 EPSS 0.56%

   A vulnerability classified as problematic has been found in CodeAstro Internet Banking System 1.0. This affects an unknown part of the file pages_withdraw_money.php. The manipulation of the argument account_number with the input 287359614--><ScRiPt%20>alert(1234)</ScRiPt><!-- lea...

4. CVE-2023-5696 CodeAstro Internet Banking System pages_transfer_money.php cross site scripting

   Published 2023-10-22

   Medium·CVSS 6.1 EPSS 0.56%

   A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file pages_transfer_money.php. The manipulation of the argument account_number with the input 357146928--><ScRiPt%20>a...

5. CVE-2023-5695 CodeAstro Internet Banking System pages_reset_pwd.php cross site scripting

   Published 2023-10-22

   Medium·CVSS 6.1 EPSS 0.56%

   A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file pages_reset_pwd.php. The manipulation of the argument email with the input testing%40example.com'%26%25<...

6. CVE-2023-5694 CodeAstro Internet Banking System pages_system_settings.php cross site scripting

   Published 2023-10-22

   Medium·CVSS 6.1 EPSS 0.56%

   A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been classified as problematic. Affected is an unknown function of the file pages_system_settings.php. The manipulation of the argument sys_name with the input <ScRiPt >alert(991)</ScRiPt> leads to cross s...

7. CVE-2023-5693 CodeAstro Internet Banking System pages_reset_pwd.php sql injection

   Published 2023-10-22

   Critical·CVSS 9.8 EPSS 0.74%

   A vulnerability was found in CodeAstro Internet Banking System 1.0 and classified as critical. This issue affects some unknown processing of the file pages_reset_pwd.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The expl...

8. CVE-2022-43085 An arbitrary file upload vulnerability in add_product.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

   Published 2022-11-01

   High·CVSS 7.2 EPSS 1.4%

   An arbitrary file upload vulnerability in add_product.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

9. CVE-2022-43086 Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via update_customer.php.

   Published 2022-11-01

   Medium·CVSS 4.9 EPSS 0.88%

   Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via update_customer.php.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.