codeastro has 26 CVEs on record between 2025 and 2026. 4 were published in the last 90 days. The busiest recent month was February 2026 with 3. The median CVSS is 6.3 (medium), with 2 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-89 (23) and CWE-74 (22). Most affected products: gym_management_system (9), membership_management_system (3), simple_banking_system (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.3
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Products
- gym_management_system 9
- membership_management_system 3
- simple_banking_system 3
- simple_inventory_system 3
- Simple Pharmacy Management System 2
- online_leave_application 2
Worst active — by depth score
CVE-2025-70150Critical· 9.8CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated attackers to delete arbitrary member records via the id parameter.66CVE-2025-70149Critical· 9.8CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parameter.66CVE-2025-70148High· 7.5Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access membership card data of arbitrary users via direct requests with a manipulated…53CVE-2026-94048Medium· 6.6A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.048CVE-2026-104625Medium· 6.3A security flaw has been discovered in CodeAstro Simple Loan Management System 1.047
codeastro vulnerabilities
CVEs affecting codeastro, newest first. Open any entry for full detail, references, and exploit status.
26 CVEsRSS
CVE-2026-104625Medium· 6.3PoCA security flaw has been discovered in CodeAstro Simple Loan Management System 1.0
A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulation of the argument g_name results in sql injection. The attack may b…
CVE-2026-104614Medium· 6.3PoCA vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0
A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown processing of the file /SimplePharmacy-PHP/product/delete.php. Such manipulation of the argument ID leads to sql injection…
CVE-2026-104613Medium· 6.3PoCA vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0
A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This manipulation of the argument ID causes sql injection. The a…
CVE-2026-94048Medium· 6.6PoCA vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0
A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulation of the argument role_id results in improper privilege man…
CVE-2025-70150Critical· 9.8PoCCodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated attackers to delete arbitrary member records via the id parameter.
CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated attackers to delete arbitrary member records via the id parameter.
CVE-2025-70149Critical· 9.8PoCCodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parameter.
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parameter.
CVE-2025-70148High· 7.5PoCMissing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access membership card data of arbitrary users via direct requests with a manipulated…
Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access membership card data of arbitrary users via direct requests with a manipulated…
CVE-2025-13280High· 7.3A vulnerability was determined in CodeAstro Simple Inventory System 1.0
A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injecti…
CVE-2025-13172Medium· 6.3A security flaw has been discovered in CodeAstro Gym Management System 1.0
A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may …
CVE-2025-12242Medium· 6.3A vulnerability has been found in CodeAstro Gym Management System 1.0
A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendance.php. Such manipulation of the argument ID leads to sql injectio…
CVE-2025-12261Medium· 6.3A vulnerability was found in CodeAstro Gym Management System 1.0
A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can …
CVE-2025-11610Medium· 6.3A security flaw has been discovered in SourceCodester Simple Inventory System 1.0
A security flaw has been discovered in SourceCodester Simple Inventory System 1.0. This issue affects some unknown processing of the file /brand.php. The manipulation of the argument editBrandName results in sql injection. The attack can…
CVE-2025-11593Medium· 6.3A flaw has been found in CodeAstro Gym Management System 1.0
A flaw has been found in CodeAstro Gym Management System 1.0. This vulnerability affects unknown code of the file /admin/actions/delete-equipment.php. This manipulation of the argument ID causes sql injection. The attack may be initiated…
CVE-2025-11592Medium· 6.3A vulnerability was detected in CodeAstro Gym Management System 1.0
A vulnerability was detected in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/edit-equipmentform.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotel…
CVE-2025-11591Medium· 6.3A security vulnerability has been detected in CodeAstro Gym Management System 1.0
A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/actions/delete-member.php. The manipulation of the argument ID leads to sql inject…
CVE-2025-11590Medium· 6.3A weakness has been identified in CodeAstro Gym Management System 1.0
A weakness has been identified in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/equipment-entry.php. Executing a manipulation of the argument ename can lead to sql inje…
CVE-2025-11611Medium· 6.3A weakness has been identified in SourceCodester Simple Inventory System 1.0
A weakness has been identified in SourceCodester Simple Inventory System 1.0. Impacted is an unknown function of the file /user.php. This manipulation of the argument uemail causes sql injection. The attack is possible to be carried out …
CVE-2025-11589Medium· 6.3A security flaw has been discovered in CodeAstro Gym Management System 1.0
A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/user-payment.php. Performing a manipulation of the argument plan results in sql injection. It is possible to i…
CVE-2025-11588Medium· 6.3A vulnerability was identified in CodeAstro Gym Management System 1.0
A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from …
CVE-2025-11359Medium· 6.3A security vulnerability has been detected in code-projects Simple Banking System 1.0
A security vulnerability has been detected in code-projects Simple Banking System 1.0. The affected element is an unknown function of the file /transfermoney.php. The manipulation of the argument ID leads to sql injection. Remote exploit…
CVE-2025-11358Medium· 6.3A weakness has been identified in code-projects Simple Banking System 1.0
A weakness has been identified in code-projects Simple Banking System 1.0. Impacted is an unknown function of the file /removeuser.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remot…
CVE-2025-11357Medium· 6.3A security flaw has been discovered in code-projects Simple Banking System 1.0
A security flaw has been discovered in code-projects Simple Banking System 1.0. This issue affects some unknown processing of the file /createuser.php. Performing manipulation of the argument Name results in sql injection. The attack may…
CVE-2025-11104Medium· 6.3A vulnerability was detected in CodeAstro Electricity Billing System 1.0
A vulnerability was detected in CodeAstro Electricity Billing System 1.0. Affected by this issue is some unknown functionality of the file /admin/bill.php. The manipulation of the argument uid results in sql injection. The attack may be …
CVE-2025-11118High· 7.3A vulnerability was identified in CodeAstro Student Grading System 1.0
A vulnerability was identified in CodeAstro Student Grading System 1.0. This issue affects some unknown processing of the file /adminLogin.php. Such manipulation of the argument staffId leads to sql injection. The attack may be performed…
CVE-2025-11114Medium· 6.3A flaw has been found in CodeAstro Online Leave Application 1.0
A flaw has been found in CodeAstro Online Leave Application 1.0. Affected by this vulnerability is an unknown functionality of the file /leaveAplicationForm.php. Executing manipulation of the argument absence[] can lead to sql injection.…
CVE-2025-11113Medium· 6.3A vulnerability was detected in CodeAstro Online Leave Application 1.0
A vulnerability was detected in CodeAstro Online Leave Application 1.0. Affected is an unknown function of the file /signup.php. Performing manipulation of the argument city results in sql injection. The attack may be initiated remotely.…