PT-2026-66584
CVE-2025-69935
·
تاريخ النشر
2026-07-30
·
تاريخ التحديث
2026-10-13
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
CodeAstro Membership Management System version 1.0
Description
SQL Injection occurs in the 'report.php' and 'revenue report.php' endpoints through the
fromDate parameter. SQL Injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database.Recommendations
Update CodeAstro Membership Management System version 1.0 to a patched version.
Avoid using the
fromDate parameter in the 'report.php' and 'revenue report.php' endpoints until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾