Skip to content

CodeAstro · weakness class

SQL Injection

111 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 111 is a mark on the map. Named now: 53 to 78, most at risk first.

  1. CodeAstro Gym Management System delete-member.php sql injectionCVE-2025-11591CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  2. CodeAstro Gym Management System equipment-entry.php sql injectionCVE-2025-11590CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  3. CodeAstro Gym Management System index.php sql injectionCVE-2025-11588CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  4. CodeAstro Simple Pharmacy Management view.php sql injectionCVE-2025-10780CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  5. CodeAstro Simple Online Leave Management System POST accept.php sql injectionCVE-2026-15559CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  6. CodeAstro Simple Online Leave Management System deletemp.php sql injectionCVE-2026-15558CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  7. CodeAstro Simple Online Leave Management System dashboard.php sql injectionCVE-2026-15523CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  8. CodeAstro Ecommerce Website my_account.php sql injectionCVE-2026-14799CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  9. CodeAstro Apartment Visitor Management System visitor-entry.php sql injectionCVE-2026-14798CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  10. CodeAstro Apartment Visitor Management System edit-apartment.php sql injectionCVE-2026-14797CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  11. CodeAstro Apartment Visitor Management System report.php sql injectionCVE-2026-14796CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  12. CodeAstro Apartment Visitor Management System action-visitor.php sql injectionCVE-2026-14795CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  13. CodeAstro Ecommerce Website POST Parameter confirm.php sql injectionCVE-2026-14767CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  14. CodeAstro Apartment Visitor Management System POST Parameter search-result.php sql injectionCVE-2026-14766CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  15. CodeAstro Apartment Visitor Management System add-apartment.php sql injectionCVE-2026-14689CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  16. CodeAstro Ecommerce Website my_account.php sql injectionCVE-2026-14639CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  17. CodeAstro Human Resource Management System View Endpoint Employee_model.php GetFileInfo sql injectionCVE-2026-13535CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  18. CodeAstro Human Resource Management System Update_Earn_Leave Endpoint Employee_model.php emselectByCode sql injectionCVE-2026-13525CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  19. CodeAstro Gym Management System check-attendance.php sql injectionCVE-2025-12242CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  20. CodeAstro Simple Online Leave Management System index.php sql injectionCVE-2026-15134CodeAstro · CVSS 7.3 · 0.3% likely

    CWE-89

  21. CodeAstro Online Job Portal All Jobs delete-jobs.php sql injectionCVE-2026-7028CodeAstro · CVSS 4.7 · 0.3% likely

    CWE-89

  22. CodeAstro Gym Management System view-member-report.php sql injectionCVE-2025-13172CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  23. CodeAstro Online Classroom Parameter addassessment.php sql injectionCVE-2026-5578CodeAstro · CVSS 6.3 · 0.3% likely

    CWE-89

  24. CodeAstro Student Attendance Management System index.php sql injectionCVE-2026-11582CodeAstro · CVSS 7.3 · 0.3% likely

    CWE-89

  25. CodeAstro Online Job Portal application_status.php sql injectionCVE-2026-10261CodeAstro · CVSS 7.3 · 0.3% likely

    CWE-89

  26. CodeAstro Online Job Portal delete-jobs.php sql injectionCVE-2026-10260CodeAstro · CVSS 7.3 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.