CM
Product
Complaint Management System
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 1Low 1
Watch
Add Complaint Management System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-55507 | 9.8 | Jan 3 | An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the delete_e.php component Affected: 1.0 |
| CVE-2024-55509 | 9.8 | Dec 20 | SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the… Affected: 1.0 |
| CVE-2024-55506 | 8.8 | Dec 18 | An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 (version with 0 updates) enables an attacker to execute arbitrary code and obtain sensitive information via… Affected: 1.0 |
| CVE-2024-55505 | 8.8 | Dec 18 | An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component Affected: 1.0 |
| CVE-2024-56889 | 7.5 | Feb 6 | Incorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via… Affected: 1.0 |
| CVE-2026-13549 | 5.4 | Jun 29 | CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization Affected: 1.0 |
| CVE-2026-13558 | 3.5 | Jun 29 | CodeAstro Complaint Management System Report addreport cross site scripting Affected: 1.0 |
Showing 7