Codeastro Membership Management System vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Codeastro Membership Management System: 3 record(s), with affected versions and fixes.cpe:2.3:a:codeastro:membership_management_system
CVE-2025-70150
Critical · 9.8
CWE-862 Feb 18, 2026
Missing Authorization in Codeastro Membership Management System
CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated attackers to delete arbitrary member records via the id parameter.
CVE-2025-70148
High · 7.5
CWE-862 Feb 18, 2026
Missing Authorization in Codeastro Membership Management System
Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access membership card data of arbitrary users via direct requests with a manipulated id parameter, resulting in insecure direct object reference (IDOR).
CVE-2025-70149
Critical · 9.8
CWE-89 Feb 18, 2026
SQL Injection in Codeastro Membership Management System
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parameter.