https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-29015.htmlhttps://patchthecve.com/cve/CVE-2025-29015.htmlWed, 17 Jun 2026 09:05:02 +0000MEDIUM 6.1: Code Astro Internet Banking System 2.0.0 is vulnerable to Cross Site Scripting (XSS) via the name parameter in /admin/pages_account.php.https://patchthecve.com/cve/CVE-2025-29017.htmlhttps://patchthecve.com/cve/CVE-2025-29017.htmlWed, 17 Jun 2026 09:05:03 +0000HIGH 8.8: A Remote Code Execution (RCE) vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upload validation in the profile_pic parameter within pages_view_client.php.https://patchthecve.com/cve/CVE-2025-29018.htmlhttps://patchthecve.com/cve/CVE-2025-29018.htmlWed, 17 Jun 2026 09:05:03 +0000MEDIUM 4.8: A Stored Cross-Site Scripting (XSS) vulnerability exists in the name parameter of pages_add_acc_type.php in Code Astro Internet Banking System 2.0.0.https://patchthecve.com/cve/CVE-2024-56924.htmlhttps://patchthecve.com/cve/CVE-2024-56924.htmlWed, 17 Jun 2026 08:13:05 +0000HIGH 7.3: A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking system 2.0.0 allows remote attackers to execute arbitrary JavaScript on the admin page (pages_account), potentially leading to unauthorized actions such as changing account settings or stealing sensitive user informatiohttps://patchthecve.com/cve/CVE-2024-0781.htmlhttps://patchthecve.com/cve/CVE-2024-0781.htmlWed, 17 Jun 2026 06:54:16 +0000LOW 3.5: A vulnerability, which was classified as problematic, was found in CodeAstro Internet Banking System 1.0. This affects an unknown part of the file pages_client_signup.php. The manipulation of the argument Client Full Name with the input <meta http-equiv="refresh" content="0; url=https://vuldb.com" /https://patchthecve.com/cve/CVE-2024-0773.htmlhttps://patchthecve.com/cve/CVE-2024-0773.htmlWed, 17 Jun 2026 06:54:15 +0000LOW 3.5: A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. Affected by this vulnerability is an unknown functionality of the file pages_client_signup.php. The manipulation of the argument Client Full Name leads to cross site scripting. The attack can be launched re