Skip to content

CodeAstro · weakness class

SQL Injection

111 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 111 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via update_customer.php.CVE-2022-43086Codeastro · CVSS 4.9 · 0.9% likely

    CWE-89

  2. SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the d…CVE-2024-55509Codeastro · CVSS 9.8 · 0.8% likely

    CWE-89

  3. CodeAstro Simple Loan Management System Login index.php sql injectionCVE-2024-13038CodeAstro · CVSS 7.3 · 0.8% likely

    CWE-89

  4. A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the email parameter in the inde…CVE-2024-25866Codeastro · CVSS 8.8 · 0.8% likely

    CWE-89

  5. CodeAstro Online Food Ordering System Admin Panel sql injectionCVE-2024-0247CodeAstro · CVSS 7.3 · 0.8% likely

    CWE-89

  6. CodeAstro Internet Banking System pages_reset_pwd.php sql injectionCVE-2023-5693CodeAstro · CVSS 6.3 · 0.7% likely

    CWE-89

  7. CodeAstro Membership Management System add_members.php sql injectionCVE-2024-2333CodeAstro · CVSS 6.3 · 0.7% likely

    CWE-89

  8. CodeAstro Ecommerce Site Search action.php sql injectionCVE-2024-2351CodeAstro · CVSS 6.3 · 0.7% likely

    CWE-89

  9. CodeAstro House Rental Management System signin.php sql injectionCVE-2024-12944CodeAstro · CVSS 7.3 · 0.7% likely

    CWE-89

  10. CodeAstro House Rental Management System ownersignup.php sql injectionCVE-2024-12943CodeAstro · CVSS 7.3 · 0.7% likely

    CWE-89

  11. A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the membershipType and membersh…CVE-2024-25867Codeastro · CVSS 9.1 · 0.7% likely

    CWE-89

  12. CodeAstro Real Estate Management System index.php sql injectionCVE-2025-5581CodeAstro · CVSS 7.3 · 0.6% likely

    CWE-89

  13. CodeAstro Real Estate Management System login.php sql injectionCVE-2025-5580CodeAstro · CVSS 7.3 · 0.6% likely

    CWE-89

  14. CodeAstro Membership Management System settings.php sql injectionCVE-2024-2149CodeAstro · CVSS 4.7 · 0.6% likely

    CWE-89

  15. CodeAstro Real Estate Management System register.php sql injectionCVE-2025-5583CodeAstro · CVSS 7.3 · 0.6% likely

    CWE-89

  16. CodeAstro House Rental Management System signing.php sql injectionCVE-2024-1824CodeAstro · CVSS 7.3 · 0.6% likely

    CWE-89

  17. CodeAstro Car Rental System bookingconfirm.php sql injectionCVE-2024-12981CodeAstro · CVSS 6.3 · 0.6% likely

    CWE-89

  18. CodeAstro Real Estate Management System profile.php sql injectionCVE-2025-5582CodeAstro · CVSS 6.3 · 0.6% likely

    CWE-89

  19. CodeAstro Real Estate Management System submitpropertydelete.php sql injectionCVE-2025-5610CodeAstro · CVSS 6.3 · 0.6% likely

    CWE-89

  20. CodeAstro Pharmacy Management System Login index.php sql injectionCVE-2025-4811CodeAstro · CVSS 7.3 · 0.6% likely

    CWE-89

  21. CodeAstro Membership Management System renew.php sql injectionCVE-2025-3998CodeAstro · CVSS 7.3 · 0.6% likely

    CWE-89

  22. CodeAstro Patient Record Management System login.php sql injectionCVE-2025-7147CodeAstro · CVSS 7.3 · 0.6% likely

    CWE-89

  23. Codeastro Bus Ticket Booking System v1.0 is vulnerable to SQL injection via the kodetiket parameter in /BusTicket-CI/tiket/cekorder.CVE-2025-25775Codeastro · CVSS 9.8 · 0.5% likely

    CWE-89

  24. CodeAstro Online Food Ordering System Update User Page update_users.php sql injectionCVE-2024-13070CodeAstro · CVSS 6.3 · 0.5% likely

    CWE-89

  25. CodeAstro Real Estate Management System About Us Page aboutedit.php sql injectionCVE-2024-11058CodeAstro · CVSS 4.7 · 0.5% likely

    CWE-89

  26. CodeAstro Car Rental System returncar.php sql injectionCVE-2025-3204CodeAstro · CVSS 6.3 · 0.5% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in