# cve.now: Codeastro

The newest entries naming Codeastro as an affected vendor (up to 200), of 174 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-104625](https://cve.now/CVE-2026-104625.md): CodeAstro Simple Loan Management System index.php sql injection (CVSS 5.3)
- [CVE-2026-104614](https://cve.now/CVE-2026-104614.md): CodeAstro Simple Pharmacy Management System delete.php sql injection (CVSS 5.3)
- [CVE-2026-104613](https://cve.now/CVE-2026-104613.md): CodeAstro Simple Pharmacy Management System view.php sql injection (CVSS 5.3)
- [CVE-2026-94048](https://cve.now/CVE-2026-94048.md): CodeAstro QR Code Attendance Management System UserController.php save privileges management (CVSS 5.1)
- [CVE-2026-77681](https://cve.now/CVE-2026-77681.md): CodeAstro Online Job Portal update-profile.php unrestricted upload (CVSS 5.3)
- [CVE-2026-77020](https://cve.now/CVE-2026-77020.md): CodeAstro Apartment Visitor Management System password-recovery.php sql injection (CVSS 6.9)
- [CVE-2026-77019](https://cve.now/CVE-2026-77019.md): CodeAstro Apartment Visitor Management System forgotpw.php sql injection (CVSS 6.9)
- [CVE-2026-16765](https://cve.now/CVE-2026-16765.md): CodeAstro Online Classroom loginlinkadmin.php sql injection (CVSS 6.9)
- [CVE-2026-15559](https://cve.now/CVE-2026-15559.md): CodeAstro Simple Online Leave Management System POST accept.php sql injection (CVSS 5.3)
- [CVE-2026-15558](https://cve.now/CVE-2026-15558.md): CodeAstro Simple Online Leave Management System deletemp.php sql injection (CVSS 5.3)
- [CVE-2026-15523](https://cve.now/CVE-2026-15523.md): CodeAstro Simple Online Leave Management System dashboard.php sql injection (CVSS 5.3)
- [CVE-2026-15134](https://cve.now/CVE-2026-15134.md): CodeAstro Simple Online Leave Management System index.php sql injection (CVSS 6.9)
- [CVE-2026-14799](https://cve.now/CVE-2026-14799.md): CodeAstro Ecommerce Website my\_account.php sql injection (CVSS 5.3)
- [CVE-2026-14798](https://cve.now/CVE-2026-14798.md): CodeAstro Apartment Visitor Management System visitor-entry.php sql injection (CVSS 5.3)
- [CVE-2026-14797](https://cve.now/CVE-2026-14797.md): CodeAstro Apartment Visitor Management System edit-apartment.php sql injection (CVSS 5.3)
- [CVE-2026-14796](https://cve.now/CVE-2026-14796.md): CodeAstro Apartment Visitor Management System report.php sql injection (CVSS 5.3)
- [CVE-2026-14795](https://cve.now/CVE-2026-14795.md): CodeAstro Apartment Visitor Management System action-visitor.php sql injection (CVSS 5.3)
- [CVE-2026-14767](https://cve.now/CVE-2026-14767.md): CodeAstro Ecommerce Website POST Parameter confirm.php sql injection (CVSS 5.3)
- [CVE-2026-14766](https://cve.now/CVE-2026-14766.md): CodeAstro Apartment Visitor Management System POST Parameter search-result.php sql injection (CVSS 5.3)
- [CVE-2026-14689](https://cve.now/CVE-2026-14689.md): CodeAstro Apartment Visitor Management System add-apartment.php sql injection (CVSS 5.3)
- [CVE-2026-14640](https://cve.now/CVE-2026-14640.md): CodeAstro Apartment Visitor Management System Login index.php sql injection (CVSS 6.9)
- [CVE-2026-14639](https://cve.now/CVE-2026-14639.md): CodeAstro Ecommerce Website my\_account.php sql injection (CVSS 5.3)
- [CVE-2026-13558](https://cve.now/CVE-2026-13558.md): CodeAstro Complaint Management System Report addreport cross site scripting (CVSS 5.1)
- [CVE-2026-13549](https://cve.now/CVE-2026-13549.md): CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization (CVSS 5.3)
- [CVE-2026-13537](https://cve.now/CVE-2026-13537.md): CodeAstro Human Resource Management System cross-site request forgery (CVSS 5.3)
- [CVE-2026-13535](https://cve.now/CVE-2026-13535.md): CodeAstro Human Resource Management System View Endpoint Employee\_model.php GetFileInfo sql injection (CVSS 5.3)
- [CVE-2026-13525](https://cve.now/CVE-2026-13525.md): CodeAstro Human Resource Management System Update\_Earn\_Leave Endpoint Employee\_model.php emselectByCode sql injection (CVSS 5.3)
- [CVE-2026-12175](https://cve.now/CVE-2026-12175.md): CodeAstro Student Attendance Management System createStudents.php sql injection (CVSS 5.1)
- [CVE-2026-12131](https://cve.now/CVE-2026-12131.md): CodeAstro Human Resource Management System Payroll Invoice Payroll.php sql injection (CVSS 5.3)
- [CVE-2026-12130](https://cve.now/CVE-2026-12130.md): CodeAstro Human Resource Management System Projects Management Add\_Projects cross site scripting (CVSS 5.1)
- [CVE-2026-12129](https://cve.now/CVE-2026-12129.md): CodeAstro Human Resource Management System Dashboard add\_tod cross site scripting (CVSS 5.1)
- [CVE-2026-11585](https://cve.now/CVE-2026-11585.md): CodeAstro Student Attendance Management System createClassArms.php sql injection (CVSS 5.3)
- [CVE-2026-11584](https://cve.now/CVE-2026-11584.md): CodeAstro Student Attendance Management System createClass.php edit sql injection (CVSS 5.3)
- [CVE-2026-11583](https://cve.now/CVE-2026-11583.md): CodeAstro Student Attendance Management System createClass.php sql injection (CVSS 5.3)
- [CVE-2026-11582](https://cve.now/CVE-2026-11582.md): CodeAstro Student Attendance Management System index.php sql injection (CVSS 6.9)
- [CVE-2026-11559](https://cve.now/CVE-2026-11559.md): CodeAstro Payroll System view\_account.php sql injection (CVSS 5.3)
- [CVE-2026-11558](https://cve.now/CVE-2026-11558.md): CodeAstro Payroll System home\_salary.php sql injection (CVSS 5.3)
- [CVE-2026-11510](https://cve.now/CVE-2026-11510.md): CodeAstro Leave Management System add\_leave.php sql injection (CVSS 5.3)
- [CVE-2026-11509](https://cve.now/CVE-2026-11509.md): CodeAstro Leave Management System search\_staff\_for\_updation.php sql injection (CVSS 5.3)
- [CVE-2026-11508](https://cve.now/CVE-2026-11508.md): CodeAstro Leave Management System search\_staff\_to\_assign\_pc.php sql injection (CVSS 5.3)
- [CVE-2026-11507](https://cve.now/CVE-2026-11507.md): CodeAstro Leave Management System delete\_leave\_type.php sql injection (CVSS 5.3)
- [CVE-2026-11506](https://cve.now/CVE-2026-11506.md): CodeAstro Leave Management System search\_staff\_for\_deletion.php sql injection (CVSS 5.3)
- [CVE-2026-11495](https://cve.now/CVE-2026-11495.md): CodeAstro Ingredients Stock Management System add\_stock.php sql injection (CVSS 5.3)
- [CVE-2026-11491](https://cve.now/CVE-2026-11491.md): CodeAstro Human Resource Management System Notice Board Management All\_notice cross site scripting (CVSS 4.8)
- [CVE-2026-10286](https://cve.now/CVE-2026-10286.md): CodeAstro Payroll System home\_employee.php sql injection (CVSS 5.3)
- [CVE-2026-10261](https://cve.now/CVE-2026-10261.md): CodeAstro Online Job Portal application\_status.php sql injection (CVSS 6.9)
- [CVE-2026-10260](https://cve.now/CVE-2026-10260.md): CodeAstro Online Job Portal delete-jobs.php sql injection (CVSS 6.9)
- [CVE-2026-10235](https://cve.now/CVE-2026-10235.md): CodeAstro Ingredients Stock Management System stock\_manager.php sql injection (CVSS 5.3)
- [CVE-2026-9542](https://cve.now/CVE-2026-9542.md): CodeAstro Leave Management System add\_staff.php sql injection (CVSS 5.3)
- [CVE-2026-8231](https://cve.now/CVE-2026-8231.md): CodeAstro Online Catering Ordering System deleteorder.php sql injection (CVSS 5.3)
- [CVE-2026-8132](https://cve.now/CVE-2026-8132.md): CodeAstro Leave Management System login.php sql injection (CVSS 6.9)
- [CVE-2026-8097](https://cve.now/CVE-2026-8097.md): CodeAstro Online Classroom askquery.php sql injection (CVSS 5.3)
- [CVE-2026-7745](https://cve.now/CVE-2026-7745.md): CodeAstro Online Classroom facultydetails sql injection (CVSS 5.3)
- [CVE-2026-7744](https://cve.now/CVE-2026-7744.md): CodeAstro Online Classroom addnewstudent sql injection (CVSS 5.3)
- [CVE-2026-7743](https://cve.now/CVE-2026-7743.md): CodeAstro Online Classroom studentdetails sql injection (CVSS 5.3)
- [CVE-2026-7742](https://cve.now/CVE-2026-7742.md): CodeAstro Online Classroom facultylogin sql injection (CVSS 5.3)
- [CVE-2026-7741](https://cve.now/CVE-2026-7741.md): CodeAstro Online Classroom studentlogin sql injection (CVSS 5.3)
- [CVE-2026-7196](https://cve.now/CVE-2026-7196.md): CodeAstro Online Classroom guestdetails sql injection (CVSS 5.3)
- [CVE-2026-7148](https://cve.now/CVE-2026-7148.md): CodeAstro Online Classroom addnewfaculty sql injection (CVSS 5.3)
- [CVE-2026-7071](https://cve.now/CVE-2026-7071.md): CodeAstro Online Job Portal user-cvs file information disclosure (CVSS 6.9)
- [CVE-2026-7028](https://cve.now/CVE-2026-7028.md): CodeAstro Online Job Portal All Jobs delete-jobs.php sql injection (CVSS 5.1)
- [CVE-2026-6201](https://cve.now/CVE-2026-6201.md): CodeAstro Online Job Portal Delete Job Posting job-delete.php access control (CVSS 5.3)
- [CVE-2026-6033](https://cve.now/CVE-2026-6033.md): CodeAstro Online Classroom updatedetailsfromstudent.php sql injection (CVSS 5.3)
- [CVE-2026-6010](https://cve.now/CVE-2026-6010.md): CodeAstro Online Classroom takeassessment2.php sql injection (CVSS 5.3)
- [CVE-2026-5580](https://cve.now/CVE-2026-5580.md): CodeAstro Online Classroom Parameter addvideos.php sql injection (CVSS 5.3)
- [CVE-2026-5579](https://cve.now/CVE-2026-5579.md): CodeAstro Online Classroom Parameter updatedetailsfromfaculty.php sql injection (CVSS 5.3)
- [CVE-2026-5578](https://cve.now/CVE-2026-5578.md): CodeAstro Online Classroom Parameter addassessment.php sql injection (CVSS 5.3)
- [CVE-2026-3137](https://cve.now/CVE-2026-3137.md): CodeAstro Food Ordering System food\_ordering.exe stack-based overflow (CVSS 4.8)
- [CVE-2025-14900](https://cve.now/CVE-2025-14900.md): CodeAstro Real Estate Management System Administrator Endpoint userdelete.php sql injection (CVSS 5.1)
- [CVE-2025-14899](https://cve.now/CVE-2025-14899.md): CodeAstro Real Estate Management System Administrator Endpoint stateadd.php sql injection (CVSS 5.1)
- [CVE-2025-14898](https://cve.now/CVE-2025-14898.md): CodeAstro Real Estate Management System Administrator Endpoint userbuilderdelete.php sql injection (CVSS 5.1)
- [CVE-2025-14897](https://cve.now/CVE-2025-14897.md): CodeAstro Real Estate Management System Administrator Endpoint useragentdelete.php sql injection (CVSS 5.1)
- [CVE-2025-13280](https://cve.now/CVE-2025-13280.md): CodeAstro Simple Inventory System Login index.php sql injection (CVSS 6.9)
- [CVE-2025-13172](https://cve.now/CVE-2025-13172.md): CodeAstro Gym Management System view-member-report.php sql injection (CVSS 5.3)
- [CVE-2025-12610](https://cve.now/CVE-2025-12610.md): CodeAstro Gym Management System view-progress-report.php sql injection (CVSS 5.1)
- [CVE-2025-12609](https://cve.now/CVE-2025-12609.md): CodeAstro Gym Management System update-progress.php sql injection (CVSS 5.1)
- [CVE-2025-12261](https://cve.now/CVE-2025-12261.md): CodeAstro Gym Management System remove-announcement.php sql injection (CVSS 5.3)
- [CVE-2025-12242](https://cve.now/CVE-2025-12242.md): CodeAstro Gym Management System check-attendance.php sql injection (CVSS 5.3)
- [CVE-2025-11593](https://cve.now/CVE-2025-11593.md): CodeAstro Gym Management System delete-equipment.php sql injection (CVSS 5.3)
- [CVE-2025-11592](https://cve.now/CVE-2025-11592.md): CodeAstro Gym Management System edit-equipmentform.php sql injection (CVSS 5.3)
- [CVE-2025-11591](https://cve.now/CVE-2025-11591.md): CodeAstro Gym Management System delete-member.php sql injection (CVSS 5.3)
- [CVE-2025-11590](https://cve.now/CVE-2025-11590.md): CodeAstro Gym Management System equipment-entry.php sql injection (CVSS 5.3)
- [CVE-2025-11589](https://cve.now/CVE-2025-11589.md): CodeAstro Gym Management System user-payment.php sql injection (CVSS 5.3)
- [CVE-2025-11588](https://cve.now/CVE-2025-11588.md): CodeAstro Gym Management System index.php sql injection (CVSS 5.3)
- [CVE-2025-11118](https://cve.now/CVE-2025-11118.md): CodeAstro Student Grading System adminLogin.php sql injection (CVSS 6.9)
- [CVE-2025-11114](https://cve.now/CVE-2025-11114.md): CodeAstro Online Leave Application leaveAplicationForm.php sql injection (CVSS 5.3)
- [CVE-2025-11113](https://cve.now/CVE-2025-11113.md): CodeAstro Online Leave Application signup.php sql injection (CVSS 5.3)
- [CVE-2025-11104](https://cve.now/CVE-2025-11104.md): CodeAstro Electricity Billing System bill.php sql injection (CVSS 5.3)
- [CVE-2025-10780](https://cve.now/CVE-2025-10780.md): CodeAstro Simple Pharmacy Management view.php sql injection (CVSS 5.3)
- [CVE-2025-9942](https://cve.now/CVE-2025-9942.md): CodeAstro Real Estate Management System submitproperty.php unrestricted upload (CVSS 5.3)
- [CVE-2025-9941](https://cve.now/CVE-2025-9941.md): CodeAstro Real Estate Management System register.php unrestricted upload (CVSS 5.3)
- [CVE-2025-9940](https://cve.now/CVE-2025-9940.md): CodeAstro Real Estate Management System feature.php cross site scripting (CVSS 5.1)
- [CVE-2025-9939](https://cve.now/CVE-2025-9939.md): CodeAstro Real Estate Management System propertyview.php cross site scripting (CVSS 5.1)
- [CVE-2025-9237](https://cve.now/CVE-2025-9237.md): CodeAstro Ecommerce Website Edit Your Account my\_account.php cross site scripting (CVSS 5.1)
- [CVE-2025-7153](https://cve.now/CVE-2025-7153.md): CodeAstro Simple Hospital Management System POST Parameter doctor.html cross site scripting (CVSS 5.1)
- [CVE-2025-7148](https://cve.now/CVE-2025-7148.md): CodeAstro Simple Hospital Management System POST Parameter patient.html cross site scripting (CVSS 5.1)
- [CVE-2025-7147](https://cve.now/CVE-2025-7147.md): CodeAstro Patient Record Management System login.php sql injection (CVSS 6.9)
- [CVE-2025-7133](https://cve.now/CVE-2025-7133.md): CodeAstro Online Movie Ticket Booking System cross-site request forgery (CVSS 5.3)
- [CVE-2025-6664](https://cve.now/CVE-2025-6664.md): CodeAstro Patient Record Management System cross-site request forgery (CVSS 5.3)
- [CVE-2025-6478](https://cve.now/CVE-2025-6478.md): CodeAstro Expense Management System cross-site request forgery (CVSS 5.3)
- [CVE-2025-6452](https://cve.now/CVE-2025-6452.md): CodeAstro Patient Record Management System Generate New Report Page cross site scripting (CVSS 4.8)
- [CVE-2025-6131](https://cve.now/CVE-2025-6131.md): CodeAstro Food Ordering System POST Request Parameter edit cross site scripting (CVSS 4.8)
- [CVE-2025-5611](https://cve.now/CVE-2025-5611.md): CodeAstro Real Estate Management System submitpropertyupdate.php sql injection (CVSS 5.3)
- [CVE-2025-5610](https://cve.now/CVE-2025-5610.md): CodeAstro Real Estate Management System submitpropertydelete.php sql injection (CVSS 5.3)
- [CVE-2025-5583](https://cve.now/CVE-2025-5583.md): CodeAstro Real Estate Management System register.php sql injection (CVSS 6.9)
- [CVE-2025-5582](https://cve.now/CVE-2025-5582.md): CodeAstro Real Estate Management System profile.php sql injection (CVSS 5.3)
- [CVE-2025-5581](https://cve.now/CVE-2025-5581.md): CodeAstro Real Estate Management System index.php sql injection (CVSS 6.9)
- [CVE-2025-5580](https://cve.now/CVE-2025-5580.md): CodeAstro Real Estate Management System login.php sql injection (CVSS 6.9)
- [CVE-2025-4811](https://cve.now/CVE-2025-4811.md): CodeAstro Pharmacy Management System Login index.php sql injection (CVSS 6.9)
- [CVE-2025-3998](https://cve.now/CVE-2025-3998.md): CodeAstro Membership Management System renew.php sql injection (CVSS 6.9)
- [CVE-2025-3205](https://cve.now/CVE-2025-3205.md): CodeAstro Student Grading System studentsubject.php sql injection (CVSS 5.3)
- [CVE-2025-3204](https://cve.now/CVE-2025-3204.md): CodeAstro Car Rental System returncar.php sql injection (CVSS 5.3)
- [CVE-2024-13070](https://cve.now/CVE-2024-13070.md): CodeAstro Online Food Ordering System Update User Page update\_users.php sql injection (CVSS 5.3)
- [CVE-2024-13067](https://cve.now/CVE-2024-13067.md): CodeAstro Online Food Ordering System All Users Page all\_users.php access control (CVSS 6.9)
- [CVE-2024-13038](https://cve.now/CVE-2024-13038.md): CodeAstro Simple Loan Management System Login index.php sql injection (CVSS 6.9)
- [CVE-2024-12981](https://cve.now/CVE-2024-12981.md): CodeAstro Car Rental System bookingconfirm.php sql injection (CVSS 5.3)
- [CVE-2024-12944](https://cve.now/CVE-2024-12944.md): CodeAstro House Rental Management System signin.php sql injection (CVSS 6.9)
- [CVE-2024-12943](https://cve.now/CVE-2024-12943.md): CodeAstro House Rental Management System ownersignup.php sql injection (CVSS 6.9)
- [CVE-2024-12941](https://cve.now/CVE-2024-12941.md): CodeAstro Blood Donor Management System deletedannounce.php sql injection (CVSS 5.3)
- [CVE-2024-11678](https://cve.now/CVE-2024-11678.md): CodeAstro Hospital Management System his\_doc\_register\_patient.php cross site scripting (CVSS 5.3)
- [CVE-2024-11677](https://cve.now/CVE-2024-11677.md): CodeAstro Hospital Management System Add Vendor Details Page his\_admin\_add\_vendor.php cross site scripting (CVSS 5.3)
- [CVE-2024-11676](https://cve.now/CVE-2024-11676.md): CodeAstro Hospital Management System Add Laboratory Equipment Page his\_admin\_add\_lab\_equipment.php cross site scripting (CVSS 5.3)
- [CVE-2024-11675](https://cve.now/CVE-2024-11675.md): CodeAstro Hospital Management System Add Patient Details Page his\_admin\_register\_patient.php cross site scripting (CVSS 5.3)
- [CVE-2024-11674](https://cve.now/CVE-2024-11674.md): CodeAstro Hospital Management System his\_doc\_update-account.php unrestricted upload (CVSS 5.3)
- [CVE-2024-11058](https://cve.now/CVE-2024-11058.md): CodeAstro Real Estate Management System About Us Page aboutedit.php sql injection (CVSS 5.1)
- [CVE-2024-11000](https://cve.now/CVE-2024-11000.md): CodeAstro Real Estate Management System About Us Page aboutedit.php unrestricted upload (CVSS 5.1)
- [CVE-2024-10999](https://cve.now/CVE-2024-10999.md): CodeAstro Real Estate Management System About Us Page aboutadd.php unrestricted upload (CVSS 5.1)
- [CVE-2024-7912](https://cve.now/CVE-2024-7912.md): CodeAstro Online Railway Reservation System assets exposure of information through directory listing (CVSS 6.9)
- [CVE-2024-7910](https://cve.now/CVE-2024-7910.md): CodeAstro Online Railway Reservation System Profile Photo Update emp-profile-avatar.php unrestricted upload (CVSS 5.1)
- [CVE-2024-7815](https://cve.now/CVE-2024-7815.md): CodeAstro Online Railway Reservation System Update Employee Page admin-update-employee.php cross site scripting (CVSS 5.1)
- [CVE-2024-7814](https://cve.now/CVE-2024-7814.md): CodeAstro Online Railway Reservation System Add Employee Page admin-add-employee.php cross site scripting (CVSS 5.1)
- [CVE-2024-2351](https://cve.now/CVE-2024-2351.md): CodeAstro Ecommerce Site Search action.php sql injection (CVSS 6.3)
- [CVE-2024-2333](https://cve.now/CVE-2024-2333.md): CodeAstro Membership Management System add\_members.php sql injection (CVSS 6.3)
- [CVE-2024-2149](https://cve.now/CVE-2024-2149.md): CodeAstro Membership Management System settings.php sql injection (CVSS 4.7)
- [CVE-2024-2076](https://cve.now/CVE-2024-2076.md): CodeAstro House Rental Management System tenant.php missing authentication (CVSS 5.3)
- [CVE-2024-1924](https://cve.now/CVE-2024-1924.md): CodeAstro Membership Management System get\_membership\_amount.php sql injection (CVSS 6.3)
- [CVE-2024-1825](https://cve.now/CVE-2024-1825.md): CodeAstro House Rental Management System User Registration Page cross site scripting (CVSS 4.3)
- [CVE-2024-1824](https://cve.now/CVE-2024-1824.md): CodeAstro House Rental Management System signing.php sql injection (CVSS 7.3)
- [CVE-2024-1823](https://cve.now/CVE-2024-1823.md): CodeAstro Simple Voting System Backend users.php access control (CVSS 5.3)
- [CVE-2024-1819](https://cve.now/CVE-2024-1819.md): CodeAstro Membership Management System Add Members Tab unrestricted upload (CVSS 4.7)
- [CVE-2024-1818](https://cve.now/CVE-2024-1818.md): CodeAstro Membership Management System Logo unrestricted upload (CVSS 4.7)
- [CVE-2024-1268](https://cve.now/CVE-2024-1268.md): CodeAstro Restaurant POS System update\_product.php unrestricted upload (CVSS 6.3)
- [CVE-2024-1267](https://cve.now/CVE-2024-1267.md): CodeAstro Restaurant POS System create\_account.php cross site scripting (CVSS 3.5)
- [CVE-2024-1266](https://cve.now/CVE-2024-1266.md): CodeAstro University Management System Student Registration Form st\_reg.php cross site scripting (CVSS 2.4)
- [CVE-2024-1265](https://cve.now/CVE-2024-1265.md): CodeAstro University Management System Attendance Management att\_add.php cross site scripting (CVSS 2.4)
- [CVE-2024-1199](https://cve.now/CVE-2024-1199.md): CodeAstro Employee Task Management System attendance-info.php denial of service (CVSS 5.4)
- [CVE-2024-1103](https://cve.now/CVE-2024-1103.md): CodeAstro Real Estate Management System Feedback Form profile.php cross site scripting (CVSS 3.5)
- [CVE-2024-1031](https://cve.now/CVE-2024-1031.md): CodeAstro Expense Management System Add Expenses Page 5-Add-Expenses.php cross site scripting (CVSS 3.5)
- [CVE-2024-1022](https://cve.now/CVE-2024-1022.md): CodeAstro Simple Student Result Management System Add Class Page add\_classes.php cross site scripting (CVSS 2.4)
- [CVE-2024-0958](https://cve.now/CVE-2024-0958.md): CodeAstro Stock Management System Add Category index.php cross site scripting (CVSS 3.5)
- [CVE-2024-0782](https://cve.now/CVE-2024-0782.md): CodeAstro Online Railway Reservation System pass-profile.php cross site scripting (CVSS 3.5)
- [CVE-2024-0781](https://cve.now/CVE-2024-0781.md): CodeAstro Internet Banking System pages\_client\_signup.php redirect (CVSS 3.5)
- [CVE-2024-0773](https://cve.now/CVE-2024-0773.md): CodeAstro Internet Banking System pages\_client\_signup.php cross site scripting (CVSS 3.5)
- [CVE-2024-0543](https://cve.now/CVE-2024-0543.md): CodeAstro Real Estate Management System propertydetail.php sql injection (CVSS 6.3)
- [CVE-2024-0424](https://cve.now/CVE-2024-0424.md): CodeAstro Simple Banking System Create a User Page createuser.php cross site scripting (CVSS 3.5)
- [CVE-2024-0423](https://cve.now/CVE-2024-0423.md): CodeAstro Online Food Ordering System dishes.php cross site scripting (CVSS 3.5)
- [CVE-2024-0422](https://cve.now/CVE-2024-0422.md): CodeAstro POS and Inventory Management System New Item Creation Page new\_item cross site scripting (CVSS 3.5)
- [CVE-2024-0346](https://cve.now/CVE-2024-0346.md): CodeAstro Vehicle Booking System Feedback Page user-give-feedback.php cross site scripting (CVSS 3.5)
- [CVE-2024-0345](https://cve.now/CVE-2024-0345.md): CodeAstro Vehicle Booking System User Registration usr-register.php cross site scripting (CVSS 4.3)
- [CVE-2024-0343](https://cve.now/CVE-2024-0343.md): CodeAstro Simple House Rental System Login Panel cross site scripting (CVSS 4.3)
- [CVE-2024-0247](https://cve.now/CVE-2024-0247.md): CodeAstro Online Food Ordering System Admin Panel sql injection (CVSS 7.3)
- [CVE-2024-0194](https://cve.now/CVE-2024-0194.md): CodeAstro Internet Banking System Profile Picture pages\_account.php unrestricted upload (CVSS 6.3)
- [CVE-2023-6775](https://cve.now/CVE-2023-6775.md): CodeAstro POS and Inventory Management System item\_con cross site scripting (CVSS 3.5)
- [CVE-2023-6774](https://cve.now/CVE-2023-6774.md): CodeAstro POS and Inventory Management System register\_account cross site scripting (CVSS 4.3)
- [CVE-2023-6773](https://cve.now/CVE-2023-6773.md): CodeAstro POS and Inventory Management System User Creation register\_account access control (CVSS 4.3)
- [CVE-2023-5796](https://cve.now/CVE-2023-5796.md): CodeAstro POS System Logo setting unrestricted upload (CVSS 6.3)
- [CVE-2023-5795](https://cve.now/CVE-2023-5795.md): CodeAstro POS System Profile Picture profil unrestricted upload (CVSS 6.3)
- [CVE-2023-5699](https://cve.now/CVE-2023-5699.md): CodeAstro Internet Banking System pages\_view\_client.php cross site scripting (CVSS 3.5)
- [CVE-2023-5698](https://cve.now/CVE-2023-5698.md): CodeAstro Internet Banking System pages\_deposit\_money.php cross site scripting (CVSS 3.5)
- [CVE-2023-5697](https://cve.now/CVE-2023-5697.md): CodeAstro Internet Banking System pages\_withdraw\_money.php cross site scripting (CVSS 3.5)
- [CVE-2023-5696](https://cve.now/CVE-2023-5696.md): CodeAstro Internet Banking System pages\_transfer\_money.php cross site scripting (CVSS 3.5)
- [CVE-2023-5695](https://cve.now/CVE-2023-5695.md): CodeAstro Internet Banking System pages\_reset\_pwd.php cross site scripting (CVSS 3.5)
- [CVE-2023-5694](https://cve.now/CVE-2023-5694.md): CodeAstro Internet Banking System pages\_system\_settings.php cross site scripting (CVSS 3.5)
- [CVE-2023-5693](https://cve.now/CVE-2023-5693.md): CodeAstro Internet Banking System pages\_reset\_pwd.php sql injection (CVSS 6.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/codeastro
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.