Skip to content

CodeAstro · products

Other and unnamed products

64 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 64 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. An arbitrary file upload vulnerability in add_product.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.CVE-2022-43085Codeastro · CVSS 7.2 · 1.4% likely

    CWE-434

  2. CodeAstro POS System Profile Picture profil unrestricted uploadCVE-2023-5795CodeAstro · CVSS 6.3 · 0.9% likely

    CWE-434

  3. CodeAstro POS System Logo setting unrestricted uploadCVE-2023-5796CodeAstro · CVSS 6.3 · 0.9% likely

    CWE-434

  4. Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via update_customer.php.CVE-2022-43086Codeastro · CVSS 4.9 · 0.9% likely

    CWE-89

  5. CodeAstro Online Food Ordering System All Users Page all_users.php access controlCVE-2024-13067CodeAstro · CVSS 5.3 · 0.8% likely

    CWE-266

  6. CodeAstro Simple Loan Management System Login index.php sql injectionCVE-2024-13038CodeAstro · CVSS 7.3 · 0.8% likely

    CWE-89

  7. CodeAstro Online Food Ordering System Admin Panel sql injectionCVE-2024-0247CodeAstro · CVSS 7.3 · 0.8% likely

    CWE-89

  8. CodeAstro POS and Inventory Management System User Creation register_account access controlCVE-2023-6773CodeAstro · CVSS 4.3 · 0.7% likely

    CWE-284

  9. CodeAstro Simple House Rental System Login Panel cross site scriptingCVE-2024-0343CodeAstro · CVSS 4.3 · 0.7% likely

    CWE-79

  10. CodeAstro Employee Task Management System attendance-info.php denial of serviceCVE-2024-1199CodeAstro · CVSS 5.4 · 0.7% likely

    CWE-404

  11. CodeAstro Ecommerce Site Search action.php sql injectionCVE-2024-2351CodeAstro · CVSS 6.3 · 0.7% likely

    CWE-89

  12. CodeAstro Simple Voting System Backend users.php access controlCVE-2024-1823CodeAstro · CVSS 5.3 · 0.7% likely

    CWE-284

  13. CodeAstro POS and Inventory Management System register_account cross site scriptingCVE-2023-6774CodeAstro · CVSS 4.3 · 0.7% likely

    CWE-79

  14. CodeAstro Vehicle Booking System User Registration usr-register.php cross site scriptingCVE-2024-0345CodeAstro · CVSS 4.3 · 0.6% likely

    CWE-79

  15. CodeAstro Restaurant POS System update_product.php unrestricted uploadCVE-2024-1268CodeAstro · CVSS 6.3 · 0.6% likely

    CWE-434

  16. CodeAstro Car Rental System bookingconfirm.php sql injectionCVE-2024-12981CodeAstro · CVSS 6.3 · 0.6% likely

    CWE-89

  17. CodeAstro POS and Inventory Management System item_con cross site scriptingCVE-2023-6775CodeAstro · CVSS 3.5 · 0.6% likely

    CWE-79

  18. CodeAstro Pharmacy Management System Login index.php sql injectionCVE-2025-4811CodeAstro · CVSS 7.3 · 0.6% likely

    CWE-89

  19. CodeAstro Stock Management System Add Category index.php cross site scriptingCVE-2024-0958CodeAstro · CVSS 3.5 · 0.6% likely

    CWE-79

  20. CodeAstro Patient Record Management System login.php sql injectionCVE-2025-7147CodeAstro · CVSS 7.3 · 0.6% likely

    CWE-89

  21. Codeastro Bus Ticket Booking System v1.0 is vulnerable to SQL injection via the kodetiket parameter in /BusTicket-CI/tiket/cekorder.CVE-2025-25775Codeastro · CVSS 9.8 · 0.5% likely

    CWE-89

  22. CodeAstro Online Food Ordering System Update User Page update_users.php sql injectionCVE-2024-13070CodeAstro · CVSS 6.3 · 0.5% likely

    CWE-89

  23. CodeAstro University Management System Student Registration Form st_reg.php cross site scriptingCVE-2024-1266CodeAstro · CVSS 2.4 · 0.5% likely

    CWE-79

  24. CodeAstro Simple Student Result Management System Add Class Page add_classes.php cross site scriptingCVE-2024-1022CodeAstro · CVSS 2.4 · 0.5% likely

    CWE-79

  25. CodeAstro Online Food Ordering System dishes.php cross site scriptingCVE-2024-0423CodeAstro · CVSS 3.5 · 0.5% likely

    CWE-79

  26. CodeAstro Vehicle Booking System Feedback Page user-give-feedback.php cross site scriptingCVE-2024-0346CodeAstro · CVSS 3.5 · 0.5% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.