Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CodeAstro — Vulnerabilities & Security Advisories 174

Browse all 174 CVE security advisories affecting CodeAstro. AI-powered Chinese analysis, POCs, and references for each vulnerability.

CodeAstro operates as a software development and IT services provider, primarily focusing on custom application development and digital transformation solutions for enterprise clients. Security audits have identified a significant volume of vulnerabilities within its ecosystem, with 122 CVEs currently on record. These flaws predominantly involve remote code execution and cross-site scripting, indicating persistent weaknesses in input validation and session management across various deployed modules. Additionally, several instances of privilege escalation have been documented, suggesting inadequate access control mechanisms in legacy systems. While no single catastrophic breach has been publicly attributed solely to CodeAstro, the high frequency of critical severity ratings highlights systemic issues in their secure development lifecycle. Recent patches have addressed some remote execution vectors, yet the sheer number of outstanding issues necessitates rigorous third-party security assessments to mitigate ongoing risks for dependent organizations.

CVE ID Title CVSS Severity Published
CVE-2026-104625 CodeAstro Simple Loan Management System index.php sql injection — Simple Loan Management System CWE-89 6.3 Medium 2026-10-02
CVE-2026-104614 CodeAstro Simple Pharmacy Management System delete.php sql injection — Simple Pharmacy Management System CWE-89 6.3 Medium 2026-10-02
CVE-2026-104613 CodeAstro Simple Pharmacy Management System view.php sql injection — Simple Pharmacy Management System CWE-89 6.3 Medium 2026-10-02
CVE-2026-94048 CodeAstro QR Code Attendance Management System UserController.php save privileges management — QR Code Attendance Management System CWE-269 6.6 Medium 2026-09-20
CVE-2026-77681 CodeAstro Online Job Portal update-profile.php unrestricted upload — Online Job Portal CWE-434 6.3 Medium 2026-08-21
CVE-2026-77020 CodeAstro Apartment Visitor Management System password-recovery.php sql injection — Apartment Visitor Management System CWE-89 7.3 High 2026-08-20
CVE-2026-77019 CodeAstro Apartment Visitor Management System forgotpw.php sql injection — Apartment Visitor Management System CWE-89 7.3 High 2026-08-20
CVE-2026-16765 CodeAstro Online Classroom loginlinkadmin.php sql injection — Online Classroom CWE-89 7.3 High 2026-07-23
CVE-2026-15559 CodeAstro Simple Online Leave Management System POST accept.php sql injection — Simple Online Leave Management System CWE-89 6.3 Medium 2026-07-13
CVE-2026-15558 CodeAstro Simple Online Leave Management System deletemp.php sql injection — Simple Online Leave Management System CWE-89 6.3 Medium 2026-07-13
CVE-2026-15523 CodeAstro Simple Online Leave Management System dashboard.php sql injection — Simple Online Leave Management System CWE-89 6.3 Medium 2026-07-13
CVE-2026-15134 CodeAstro Simple Online Leave Management System index.php sql injection — Simple Online Leave Management System CWE-89 7.3 High 2026-07-08
CVE-2026-14799 CodeAstro Ecommerce Website my_account.php sql injection — Ecommerce Website CWE-89 6.3 Medium 2026-07-06
CVE-2026-14798 CodeAstro Apartment Visitor Management System visitor-entry.php sql injection — Apartment Visitor Management System CWE-89 6.3 Medium 2026-07-06
CVE-2026-14797 CodeAstro Apartment Visitor Management System edit-apartment.php sql injection — Apartment Visitor Management System CWE-89 6.3 Medium 2026-07-06
CVE-2026-14796 CodeAstro Apartment Visitor Management System report.php sql injection — Apartment Visitor Management System CWE-89 6.3 Medium 2026-07-06
CVE-2026-14795 CodeAstro Apartment Visitor Management System action-visitor.php sql injection — Apartment Visitor Management System CWE-89 6.3 Medium 2026-07-06
CVE-2026-14767 CodeAstro Ecommerce Website POST Parameter confirm.php sql injection — Ecommerce Website CWE-89 6.3 Medium 2026-07-05
CVE-2026-14766 CodeAstro Apartment Visitor Management System POST Parameter search-result.php sql injection — Apartment Visitor Management System CWE-89 6.3 Medium 2026-07-05
CVE-2026-14689 CodeAstro Apartment Visitor Management System add-apartment.php sql injection — Apartment Visitor Management System CWE-89 6.3 Medium 2026-07-05
CVE-2026-14640 CodeAstro Apartment Visitor Management System Login index.php sql injection — Apartment Visitor Management System CWE-89 7.3 High 2026-07-04
CVE-2026-14639 CodeAstro Ecommerce Website my_account.php sql injection — Ecommerce Website CWE-89 6.3 Medium 2026-07-04
CVE-2026-13558 CodeAstro Complaint Management System Report addreport cross site scripting — Complaint Management System CWE-79 3.5 Low 2026-06-29
CVE-2026-13549 CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization — Complaint Management System CWE-639 5.4 Medium 2026-06-29
CVE-2026-13537 CodeAstro Human Resource Management System cross-site request forgery — Human Resource Management System CWE-352 4.3 Medium 2026-06-29
CVE-2026-13535 CodeAstro Human Resource Management System View Endpoint Employee_model.php GetFileInfo sql injection — Human Resource Management System CWE-89 6.3 Medium 2026-06-29
CVE-2026-13525 CodeAstro Human Resource Management System Update_Earn_Leave Endpoint Employee_model.php emselectByCode sql injection — Human Resource Management System CWE-89 6.3 Medium 2026-06-29
CVE-2026-12175 CodeAstro Student Attendance Management System createStudents.php sql injection — Student Attendance Management System CWE-89 4.7 Medium 2026-06-13
CVE-2026-12131 CodeAstro Human Resource Management System Payroll Invoice Payroll.php sql injection — Human Resource Management System CWE-89 6.3 Medium 2026-06-12
CVE-2026-12130 CodeAstro Human Resource Management System Projects Management Add_Projects cross site scripting — Human Resource Management System CWE-79 3.5 Low 2026-06-12

This page lists every published CVE security advisory associated with CodeAstro. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.