CodeAstro · weakness class
SQL Injection
111 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 111 is a mark on the map. Named now: 27 to 52, most at risk first.
- CodeAstro Real Estate Management System submitpropertyupdate.php sql injection
- CodeAstro Real Estate Management System propertydetail.php sql injection
- CodeAstro Student Grading System studentsubject.php sql injection
- CodeAstro Blood Donor Management System deletedannounce.php sql injection
- CodeAstro Student Grading System adminLogin.php sql injection
- CodeAstro Membership Management System get_membership_amount.php sql injection
- CodeAstro Gym Management System remove-announcement.php sql injection
- CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parameter.
- CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page.
- CodeAstro Apartment Visitor Management System password-recovery.php sql injection
- CodeAstro Apartment Visitor Management System forgotpw.php sql injection
- CodeAstro Online Classroom loginlinkadmin.php sql injection
- CodeAstro Apartment Visitor Management System Login index.php sql injection
- CodeAstro Simple Inventory System Login index.php sql injection
- CodeAstro Real Estate Management System Administrator Endpoint userdelete.php sql injection
- CodeAstro Gym Management System view-progress-report.php sql injection
- CodeAstro Gym Management System edit-equipmentform.php sql injection
- CodeAstro Gym Management System user-payment.php sql injection
- CodeAstro Online Leave Application leaveAplicationForm.php sql injection
- CodeAstro Online Leave Application signup.php sql injection
- CodeAstro Gym Management System update-progress.php sql injection
- CodeAstro Real Estate Management System Administrator Endpoint stateadd.php sql injection
- CodeAstro Real Estate Management System Administrator Endpoint userbuilderdelete.php sql injection
- CodeAstro Real Estate Management System Administrator Endpoint useragentdelete.php sql injection
- CodeAstro Electricity Billing System bill.php sql injection
- CodeAstro Gym Management System delete-equipment.php sql injection
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.