Skip to content

CodeAstro · weakness class

SQL Injection

111 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 111 is a mark on the map. Named now: 27 to 52, most at risk first.

  1. CodeAstro Real Estate Management System submitpropertyupdate.php sql injectionCVE-2025-5611CodeAstro · CVSS 6.3 · 0.5% likely

    CWE-89

  2. CodeAstro Real Estate Management System propertydetail.php sql injectionCVE-2024-0543CodeAstro · CVSS 6.3 · 0.5% likely

    CWE-89

  3. CodeAstro Student Grading System studentsubject.php sql injectionCVE-2025-3205CodeAstro · CVSS 6.3 · 0.5% likely

    CWE-89

  4. CodeAstro Blood Donor Management System deletedannounce.php sql injectionCVE-2024-12941CodeAstro · CVSS 6.3 · 0.5% likely

    CWE-89

  5. CodeAstro Student Grading System adminLogin.php sql injectionCVE-2025-11118CodeAstro · CVSS 7.3 · 0.5% likely

    CWE-89

  6. CodeAstro Membership Management System get_membership_amount.php sql injectionCVE-2024-1924CodeAstro · CVSS 6.3 · 0.5% likely

    CWE-89

  7. CodeAstro Gym Management System remove-announcement.php sql injectionCVE-2025-12261CodeAstro · CVSS 6.3 · 0.5% likely

    CWE-89

  8. CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parameter.CVE-2025-70149Codeastro · CVSS 9.8 · 0.4% likely

    CWE-89

  9. CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page.CVE-2024-46472Codeastro · CVSS 8.6 · 0.4% likely

    CWE-89

  10. CodeAstro Apartment Visitor Management System password-recovery.php sql injectionCVE-2026-77020CodeAstro · CVSS 7.3 · 0.4% likely

    CWE-89

  11. CodeAstro Apartment Visitor Management System forgotpw.php sql injectionCVE-2026-77019CodeAstro · CVSS 7.3 · 0.4% likely

    CWE-89

  12. CodeAstro Online Classroom loginlinkadmin.php sql injectionCVE-2026-16765CodeAstro · CVSS 7.3 · 0.4% likely

    CWE-89

  13. CodeAstro Apartment Visitor Management System Login index.php sql injectionCVE-2026-14640CodeAstro · CVSS 7.3 · 0.4% likely

    CWE-89

  14. CodeAstro Simple Inventory System Login index.php sql injectionCVE-2025-13280CodeAstro · CVSS 7.3 · 0.4% likely

    CWE-89

  15. CodeAstro Real Estate Management System Administrator Endpoint userdelete.php sql injectionCVE-2025-14900CodeAstro · CVSS 4.7 · 0.4% likely

    CWE-89

  16. CodeAstro Gym Management System view-progress-report.php sql injectionCVE-2025-12610CodeAstro · CVSS 4.7 · 0.4% likely

    CWE-89

  17. CodeAstro Gym Management System edit-equipmentform.php sql injectionCVE-2025-11592CodeAstro · CVSS 6.3 · 0.4% likely

    CWE-89

  18. CodeAstro Gym Management System user-payment.php sql injectionCVE-2025-11589CodeAstro · CVSS 6.3 · 0.4% likely

    CWE-89

  19. CodeAstro Online Leave Application leaveAplicationForm.php sql injectionCVE-2025-11114CodeAstro · CVSS 6.3 · 0.4% likely

    CWE-89

  20. CodeAstro Online Leave Application signup.php sql injectionCVE-2025-11113CodeAstro · CVSS 6.3 · 0.4% likely

    CWE-89

  21. CodeAstro Gym Management System update-progress.php sql injectionCVE-2025-12609CodeAstro · CVSS 4.7 · 0.4% likely

    CWE-89

  22. CodeAstro Real Estate Management System Administrator Endpoint stateadd.php sql injectionCVE-2025-14899CodeAstro · CVSS 4.7 · 0.4% likely

    CWE-89

  23. CodeAstro Real Estate Management System Administrator Endpoint userbuilderdelete.php sql injectionCVE-2025-14898CodeAstro · CVSS 4.7 · 0.4% likely

    CWE-89

  24. CodeAstro Real Estate Management System Administrator Endpoint useragentdelete.php sql injectionCVE-2025-14897CodeAstro · CVSS 4.7 · 0.4% likely

    CWE-89

  25. CodeAstro Electricity Billing System bill.php sql injectionCVE-2025-11104CodeAstro · CVSS 6.3 · 0.4% likely

    CWE-89

  26. CodeAstro Gym Management System delete-equipment.php sql injectionCVE-2025-11593CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.