Vulnerabilidades de Codeastro
CVEs publicadas que afetam produtos de Codeastro: 90 registro(s), com severidade, exploração e correções.
Online Classroom 14Gym Management System 11Apartment Visitor Management System 7Leave Management System 7Human Resource Management System 7Online Job Portal 5Student Attendance Management System 5Simple Online Leave Management System 4Real Estate Management System 4Ecommerce Website 3Simple Banking System 3Simple Inventory System 3Membership Management System 3Payroll System 3Ingredients Stock Management System 2Complaint Management System 2Online Leave Application 2Food Ordering System 1Online Catering Ordering System 1Simple Loan Management System 1Student Grading System 1Electricity Billing System 1
CVE-2025-11611
Alta · 8.8
CWE-89 11/10/2025
SourceCodester Simple Inventory System user.php sql injection
A weakness has been identified in SourceCodester Simple Inventory System 1.0. Impacted is an unknown function of the file /user.php. This manipulation of the argument uemail causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
CVE-2025-11610
Alta · 8.8
CWE-89 11/10/2025
SourceCodester Simple Inventory System brand.php sql injection
A security flaw has been discovered in SourceCodester Simple Inventory System 1.0. This issue affects some unknown processing of the file /brand.php. The manipulation of the argument editBrandName results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.
CVE-2025-11593
Alta · 8.8
CWE-89 11/10/2025
CodeAstro Gym Management System delete-equipment.php sql injection
A flaw has been found in CodeAstro Gym Management System 1.0. This vulnerability affects unknown code of the file /admin/actions/delete-equipment.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.
CVE-2025-11592
Alta · 8.8
CWE-89 11/10/2025
CodeAstro Gym Management System edit-equipmentform.php sql injection
A vulnerability was detected in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/edit-equipmentform.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit is now public and may be used.
CVE-2025-11591
Alta · 8.8
CWE-89 11/10/2025
CodeAstro Gym Management System delete-member.php sql injection
A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/actions/delete-member.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-11590
Alta · 8.8
CWE-89 10/10/2025
CodeAstro Gym Management System equipment-entry.php sql injection
A weakness has been identified in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/equipment-entry.php. Executing a manipulation of the argument ename can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2025-11589
Alta · 8.8
CWE-89 10/10/2025
CodeAstro Gym Management System user-payment.php sql injection
A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/user-payment.php. Performing a manipulation of the argument plan results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
CVE-2025-11588
Alta · 8.8
CWE-89 10/10/2025
CodeAstro Gym Management System index.php sql injection
A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.
CVE-2025-11359
Alta · 8.8
CWE-74 07/10/2025
code-projects Simple Banking System transfermoney.php sql injection
A security vulnerability has been detected in code-projects Simple Banking System 1.0. The affected element is an unknown function of the file /transfermoney.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
CVE-2025-11358
Alta · 8.8
CWE-74 07/10/2025
code-projects Simple Banking System removeuser.php sql injection
A weakness has been identified in code-projects Simple Banking System 1.0. Impacted is an unknown function of the file /removeuser.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited.
CVE-2025-11357
Alta · 8.8
CWE-74 07/10/2025
code-projects Simple Banking System createuser.php sql injection
A security flaw has been discovered in code-projects Simple Banking System 1.0. This issue affects some unknown processing of the file /createuser.php. Performing manipulation of the argument Name results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.
CVE-2025-11118
Crítica · 9.8
CWE-74 28/09/2025
CodeAstro Student Grading System adminLogin.php sql injection
A vulnerability was identified in CodeAstro Student Grading System 1.0. This issue affects some unknown processing of the file /adminLogin.php. Such manipulation of the argument staffId leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.
CVE-2025-11114
Alta · 8.8
CWE-74 28/09/2025
CodeAstro Online Leave Application leaveAplicationForm.php sql injection
A flaw has been found in CodeAstro Online Leave Application 1.0. Affected by this vulnerability is an unknown functionality of the file /leaveAplicationForm.php. Executing manipulation of the argument absence[] can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.
CVE-2025-11113
Alta · 8.8
CWE-74 28/09/2025
CodeAstro Online Leave Application signup.php sql injection
A vulnerability was detected in CodeAstro Online Leave Application 1.0. Affected is an unknown function of the file /signup.php. Performing manipulation of the argument city results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. Other parameters might be affected as well.
CVE-2025-11104
Alta · 8.8
CWE-74 28/09/2025
CodeAstro Electricity Billing System bill.php sql injection
A vulnerability was detected in CodeAstro Electricity Billing System 1.0. Affected by this issue is some unknown functionality of the file /admin/bill.php. The manipulation of the argument uid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.