Access Control

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. CodeAstro Online Food Ordering System All Users Page all_users.php access controlCVE-2024-13067CodeAstro · CVSS 5.3 · 0.8% likely

   CWE-266

2. CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated attackers to delete arbitrary member r…CVE-2025-70150Codeastro · CVSS 9.8 · 0.7% likely

   CWE-862

3. CodeAstro POS and Inventory Management System User Creation register_account access controlCVE-2023-6773CodeAstro · CVSS 4.3 · 0.7% likely

   CWE-284

4. Incorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modif…CVE-2024-56889Codeastro · CVSS 7.5 · 0.7% likely

   CWE-284

5. CodeAstro Simple Voting System Backend users.php access controlCVE-2024-1823CodeAstro · CVSS 5.3 · 0.7% likely

   CWE-284

6. An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the delete_e.php component.CVE-2024-55507Codeastro · CVSS 9.8 · 0.6% likely

   CWE-281

7. Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access membership card data…CVE-2025-70148Codeastro · CVSS 7.5 · 0.5% likely

   CWE-862

8. CodeAstro QR Code Attendance Management System UserController.php save privileges managementCVE-2026-94048CodeAstro · CVSS 6.6 · 0.4% likely

   CWE-266

9. CodeAstro Online Job Portal Delete Job Posting job-delete.php access controlCVE-2026-6201CodeAstro · CVSS 5.4 · 0.3% likely

   CWE-266

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.