CodeAstro · products
Other and unnamed products
64 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 64 is a mark on the map. Named now: 1 to 26, most at risk first.
- An arbitrary file upload vulnerability in add_product.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
- CodeAstro POS System Profile Picture profil unrestricted upload
- CodeAstro POS System Logo setting unrestricted upload
- Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via update_customer.php.
- CodeAstro Online Food Ordering System All Users Page all_users.php access control
- CodeAstro Simple Loan Management System Login index.php sql injection
- CodeAstro Online Food Ordering System Admin Panel sql injection
- CodeAstro POS and Inventory Management System User Creation register_account access control
- CodeAstro Simple House Rental System Login Panel cross site scripting
- CodeAstro Employee Task Management System attendance-info.php denial of service
- CodeAstro Ecommerce Site Search action.php sql injection
- CodeAstro Simple Voting System Backend users.php access control
- CodeAstro POS and Inventory Management System register_account cross site scripting
- CodeAstro Vehicle Booking System User Registration usr-register.php cross site scripting
- CodeAstro Restaurant POS System update_product.php unrestricted upload
- CodeAstro Car Rental System bookingconfirm.php sql injection
- CodeAstro POS and Inventory Management System item_con cross site scripting
- CodeAstro Pharmacy Management System Login index.php sql injection
- CodeAstro Stock Management System Add Category index.php cross site scripting
- CodeAstro Patient Record Management System login.php sql injection
- Codeastro Bus Ticket Booking System v1.0 is vulnerable to SQL injection via the kodetiket parameter in /BusTicket-CI/tiket/cekorder.
- CodeAstro Online Food Ordering System Update User Page update_users.php sql injection
- CodeAstro University Management System Student Registration Form st_reg.php cross site scripting
- CodeAstro Simple Student Result Management System Add Class Page add_classes.php cross site scripting
- CodeAstro Online Food Ordering System dishes.php cross site scripting
- CodeAstro Vehicle Booking System Feedback Page user-give-feedback.php cross site scripting
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.