Vulnerabilidades do Codeastro Membership Management System
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Codeastro Membership Management System: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:codeastro:membership_management_system
CVE-2025-70150
Crítica · 9.8
CWE-862 18/02/2026
Missing Authorization em Codeastro Membership Management System
CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated attackers to delete arbitrary member records via the id parameter.
CVE-2025-70148
Alta · 7.5
CWE-862 18/02/2026
Missing Authorization em Codeastro Membership Management System
Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access membership card data of arbitrary users via direct requests with a manipulated id parameter, resulting in insecure direct object reference (IDOR).
CVE-2025-70149
Crítica · 9.8
CWE-89 18/02/2026
SQL Injection em Codeastro Membership Management System
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parameter.