MM
Product
Membership Management System
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 9Medium 6Low 0
Watch
Add Membership Management System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-70150 | 9.8 | Feb 18 | CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated attackers to delete arbitrary member… Affected: 1.0 |
| CVE-2025-70149 | 9.8 | Feb 18 | CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parameter Affected: 1.0 |
| CVE-2025-3998 | 9.8 | Apr 28 | CodeAstro Membership Management System renew.php sql injection Affected: 1.0 |
| CVE-2024-25867 | 9.1 | Feb 28 | A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the membershipType and… Affected: 1.0 |
| CVE-2024-25869 | 8.8 | Feb 28 | An Unrestricted File Upload vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary code via upload of a crafted php… Affected: 1.0 |
| CVE-2024-25866 | 8.8 | Feb 28 | A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the email parameter in the… Affected: 1.0 |
| CVE-2024-46472 | 8.6 | Sep 27 | CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page Affected: 1.0 |
| CVE-2025-70148 | 7.5 | Feb 18 | Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access membership card data… Affected: 1.0 |
| CVE-2024-46471 | 7.5 | Sep 27 | The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and contents of directories, potentially revealing sensitive… Affected: 1.0 |
| CVE-2024-2333 | 7.2 | Mar 9 | A vulnerability classified as critical has been found in CodeAstro Membership Management System 1.0 Affected: 1.0 |
| CVE-2024-2149 | 7.2 | Mar 3 | A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0 Affected: 1.0 |
| CVE-2024-1819 | 7.2 | Feb 23 | A vulnerability was found in CodeAstro Membership Management System 1.0 Affected: 1.0 |
| CVE-2024-1818 | 7.2 | Feb 23 | A vulnerability was found in CodeAstro Membership Management System 1.0 and classified as critical Affected: 1.0 |
| CVE-2024-46470 | 6.1 | Sep 27 | Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membership_type field in the edit-type.php… Affected: 1.0 |
| CVE-2024-25868 | 6.1 | Feb 28 | A Cross Site Scripting (XSS) vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary code via the membershipType… Affected: 1.0 |
| CVE-2024-46236 | 5.4 | Oct 21 | CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the address parameter in add_members.php and edit_member.php Affected: 1.0 |
| CVE-2024-48709 | 5.4 | Oct 21 | CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the membershipType parameter in edit_type.php Affected: 1.0 |
| CVE-2024-45528 | 5.4 | Sep 2 | CodeAstro MembershipM-PHP (aka Membership Management System in PHP) 1.0 allows add_members.php fullname stored XSS Affected: 1.0 |
| CVE-2024-1924 | 5.3 | Feb 27 | A vulnerability was found in CodeAstro Membership Management System 1.0 Affected: 1.0 |
Showing 19