codeastro vulnerabilities

Recent CVEs affecting codeastro products. 75 tracked.

codeastro has 75 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-02-25. Highest priority: CVE-2025-70150 (score 61/100).

CVE-2025-12610 MEDIUM 4.7 DOWNGRADE A vulnerability was determined in CodeAstro Gym Management System 1.0
CVE-2025-12609 MEDIUM 4.7 DOWNGRADE A vulnerability was found in CodeAstro Gym Management System 1.0
CVE-2025-70150 CRITICAL 9.8 DOWNGRADE CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.p
CVE-2025-11104 MEDIUM 6.3 DOWNGRADE A vulnerability was detected in CodeAstro Electricity Billing System 1.0
CVE-2025-11118 HIGH 7.3 DOWNGRADE A vulnerability was identified in CodeAstro Student Grading System 1.0
CVE-2025-11113 MEDIUM 6.3 DOWNGRADE A vulnerability was detected in CodeAstro Online Leave Application 1.0
CVE-2025-11114 MEDIUM 6.3 DOWNGRADE A flaw has been found in CodeAstro Online Leave Application 1.0
CVE-2025-11357 MEDIUM 6.3 DOWNGRADE A security flaw has been discovered in code-projects Simple Banking System 1.0
CVE-2025-11358 MEDIUM 6.3 DOWNGRADE A weakness has been identified in code-projects Simple Banking System 1.0
CVE-2025-11359 MEDIUM 6.3 DOWNGRADE A security vulnerability has been detected in code-projects Simple Banking System 1.0
CVE-2025-11589 MEDIUM 6.3 DOWNGRADE A security flaw has been discovered in CodeAstro Gym Management System 1.0
CVE-2025-11592 MEDIUM 6.3 DOWNGRADE A vulnerability was detected in CodeAstro Gym Management System 1.0
CVE-2025-11588 MEDIUM 6.3 DOWNGRADE A vulnerability was identified in CodeAstro Gym Management System 1.0
CVE-2025-11590 MEDIUM 6.3 DOWNGRADE A weakness has been identified in CodeAstro Gym Management System 1.0
CVE-2025-11591 MEDIUM 6.3 DOWNGRADE A security vulnerability has been detected in CodeAstro Gym Management System 1.0
CVE-2025-11593 MEDIUM 6.3 DOWNGRADE A flaw has been found in CodeAstro Gym Management System 1.0
CVE-2025-11610 MEDIUM 6.3 DOWNGRADE A security flaw has been discovered in SourceCodester Simple Inventory System 1.0
CVE-2025-11611 MEDIUM 6.3 DOWNGRADE A weakness has been identified in SourceCodester Simple Inventory System 1.0
CVE-2025-12261 MEDIUM 6.3 DOWNGRADE A vulnerability was found in CodeAstro Gym Management System 1.0
CVE-2025-12242 MEDIUM 6.3 DOWNGRADE A vulnerability has been found in CodeAstro Gym Management System 1.0
CVE-2025-13280 HIGH 7.3 DOWNGRADE A vulnerability was determined in CodeAstro Simple Inventory System 1.0
CVE-2025-13172 MEDIUM 6.3 DOWNGRADE A security flaw has been discovered in CodeAstro Gym Management System 1.0
CVE-2025-70149 CRITICAL 9.8 DOWNGRADE CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the
CVE-2025-70148 HIGH 7.5 DOWNGRADE Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management Syste
CVE-2026-3137 MEDIUM 5.3 DOWNGRADE A security vulnerability has been detected in CodeAstro Food Ordering System 1.0
CVE-2025-9942 MEDIUM 6.3 DOWNGRADE A vulnerability has been found in CodeAstro Real Estate Management System 1.0
CVE-2025-9941 MEDIUM 6.3 DOWNGRADE A flaw has been found in CodeAstro Real Estate Management System 1.0
CVE-2025-9940 LOW 3.5 DOWNGRADE A vulnerability was detected in CodeAstro Real Estate Management System 1.0
CVE-2025-9939 LOW 3.5 DOWNGRADE A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0
CVE-2025-9237 LOW 3.5 DOWNGRADE A vulnerability was found in CodeAstro Ecommerce Website 1.0
CVE-2025-7153 LOW 3.5 DOWNGRADE A vulnerability classified as problematic was found in CodeAstro Simple Hospital Management System 1.0
CVE-2025-7148 LOW 3.5 DOWNGRADE A vulnerability was found in CodeAstro Simple Hospital Management System 1.0 and classified as problematic
CVE-2025-7147 HIGH 7.3 DOWNGRADE A vulnerability has been found in CodeAstro Patient Record Management System 1.0 and classified as critical
CVE-2025-7133 MEDIUM 4.3 DOWNGRADE A vulnerability classified as problematic has been found in CodeAstro Online Movie Ticket Booking System 1.0
CVE-2025-6664 MEDIUM 4.3 DOWNGRADE A vulnerability, which was classified as problematic, was found in CodeAstro Patient Record Management System
CVE-2025-6478 MEDIUM 4.3 DOWNGRADE A vulnerability was found in CodeAstro Expense Management System 1.0
CVE-2025-6452 LOW 2.4 DOWNGRADE A vulnerability was found in CodeAstro Patient Record Management System 1.0
CVE-2025-6131 LOW 2.4 DOWNGRADE A vulnerability, which was classified as problematic, was found in CodeAstro Food Ordering System 1.0
CVE-2025-4811 HIGH 7.3 DOWNGRADE A vulnerability was found in CodeAstro Pharmacy Management System 1.0
CVE-2025-3998 HIGH 7.3 DOWNGRADE A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0
CVE-2025-3205 MEDIUM 6.3 DOWNGRADE A vulnerability, which was classified as critical, was found in CodeAstro Student Grading System 1.0
CVE-2025-3204 MEDIUM 6.3 DOWNGRADE A vulnerability, which was classified as critical, has been found in CodeAstro Car Rental System 1.0
CVE-2025-29018 MEDIUM 4.8 DOWNGRADE A Stored Cross-Site Scripting (XSS) vulnerability exists in the name parameter of pages_add_acc_type.php in Co
CVE-2025-29017 HIGH 8.8 DOWNGRADE A Remote Code Execution (RCE) vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper
CVE-2025-29015 MEDIUM 6.1 DOWNGRADE Code Astro Internet Banking System 2.0.0 is vulnerable to Cross Site Scripting (XSS) via the name parameter in
CVE-2025-25777 HIGH 8.0 DOWNGRADE Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access
CVE-2025-25776 MEDIUM 5.0 DOWNGRADE Cross-Site Scripting (XSS) vulnerability exists in the User Registration and User Profile features of Codeastr
CVE-2025-25775 CRITICAL 9.8 DOWNGRADE Codeastro Bus Ticket Booking System v1.0 is vulnerable to SQL injection via the kodetiket parameter in /BusTic
CVE-2025-14900 MEDIUM 4.7 DOWNGRADE A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0
CVE-2025-14899 MEDIUM 4.7 DOWNGRADE A weakness has been identified in CodeAstro Real Estate Management System 1.0
CVE-2025-14898 MEDIUM 4.7 DOWNGRADE A security flaw has been discovered in CodeAstro Real Estate Management System 1.0
CVE-2025-14897 MEDIUM 4.7 DOWNGRADE A vulnerability was identified in CodeAstro Real Estate Management System 1.0
CVE-2025-10780 MEDIUM 6.3 DOWNGRADE A vulnerability was determined in CodeAstro Simple Pharmacy Management 1.0
CVE-2024-56924 HIGH 7.3 DOWNGRADE A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking system 2.0.0 allows remote at
CVE-2024-56889 HIGH 7.5 DOWNGRADE Incorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint Management System v1.0 all
CVE-2024-55509 CRITICAL 9.8 DOWNGRADE SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute
CVE-2024-55507 CRITICAL 9.8 DOWNGRADE An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via th
CVE-2024-55506 HIGH 8.8 DOWNGRADE An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 (version with 0 updates) enables an atta
CVE-2024-55505 HIGH 8.8 DOWNGRADE An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via th
CVE-2024-48709 MEDIUM 5.4 DOWNGRADE CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the membershipType
CVE-2024-46472 HIGH 8.6 DOWNGRADE CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Log
CVE-2024-46471 HIGH 7.5 DOWNGRADE The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure
CVE-2024-46470 MEDIUM 6.1 DOWNGRADE Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malic
CVE-2024-46236 MEDIUM 5.4 DOWNGRADE CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the address parame
CVE-2024-45528 MEDIUM 5.4 DOWNGRADE CodeAstro MembershipM-PHP (aka Membership Management System in PHP) 1.0 allows add_members.php fullname stored
CVE-2024-13070 MEDIUM 6.3 DOWNGRADE A vulnerability was found in CodeAstro Online Food Ordering System 1.0
CVE-2024-13067 MEDIUM 5.3 DOWNGRADE A vulnerability was found in CodeAstro Online Food Ordering System 1.0 and classified as critical
CVE-2024-13038 HIGH 7.3 DOWNGRADE A vulnerability was found in CodeAstro Simple Loan Management System 1.0
CVE-2024-12981 MEDIUM 6.3 DOWNGRADE A vulnerability was found in CodeAstro Car Rental System 1.0
CVE-2024-12944 HIGH 7.3 DOWNGRADE A vulnerability was found in CodeAstro House Rental Management System 1.0
CVE-2024-12943 HIGH 7.3 DOWNGRADE A vulnerability was found in CodeAstro House Rental Management System 1.0
CVE-2024-12941 MEDIUM 6.3 DOWNGRADE A vulnerability was found in CodeAstro Blood Donor Management System 1.0 and classified as critical
CVE-2024-11058 MEDIUM 4.7 DOWNGRADE A vulnerability was found in CodeAstro Real Estate Management System up to 1.0
CVE-2024-11000 MEDIUM 4.7 DOWNGRADE A vulnerability classified as problematic was found in CodeAstro Real Estate Management System 1.0
CVE-2024-10999 MEDIUM 4.7 DOWNGRADE A vulnerability classified as problematic has been found in CodeAstro Real Estate Management System 1.0

FAQ

How do I fix codeastro vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is codeastro being exploited right now?

None of the tracked codeastro CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which codeastro CVE should I patch first?

CVE-2025-70150 currently ranks highest (61/100): CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.p.

Products

RSS feed for codeastro · ← Back to latest CVEs