Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CodeAstro — Vulnerabilities & Security Advisories 174

Browse all 174 CVE security advisories affecting CodeAstro. AI-powered Chinese analysis, POCs, and references for each vulnerability.

CodeAstro operates as a software development and IT services provider, primarily focusing on custom application development and digital transformation solutions for enterprise clients. Security audits have identified a significant volume of vulnerabilities within its ecosystem, with 122 CVEs currently on record. These flaws predominantly involve remote code execution and cross-site scripting, indicating persistent weaknesses in input validation and session management across various deployed modules. Additionally, several instances of privilege escalation have been documented, suggesting inadequate access control mechanisms in legacy systems. While no single catastrophic breach has been publicly attributed solely to CodeAstro, the high frequency of critical severity ratings highlights systemic issues in their secure development lifecycle. Recent patches have addressed some remote execution vectors, yet the sheer number of outstanding issues necessitates rigorous third-party security assessments to mitigate ongoing risks for dependent organizations.

CVE ID Title CVSS Severity Published
CVE-2026-12129 CodeAstro Human Resource Management System Dashboard add_tod cross site scripting — Human Resource Management System CWE-79 3.5 Low 2026-06-12
CVE-2026-11585 CodeAstro Student Attendance Management System createClassArms.php sql injection — Student Attendance Management System CWE-89 6.3 Medium 2026-06-08
CVE-2026-11584 CodeAstro Student Attendance Management System createClass.php edit sql injection — Student Attendance Management System CWE-89 6.3 Medium 2026-06-08
CVE-2026-11583 CodeAstro Student Attendance Management System createClass.php sql injection — Student Attendance Management System CWE-89 6.3 Medium 2026-06-08
CVE-2026-11582 CodeAstro Student Attendance Management System index.php sql injection — Student Attendance Management System CWE-89 7.3 High 2026-06-08
CVE-2026-11559 CodeAstro Payroll System view_account.php sql injection — Payroll System CWE-89 6.3 Medium 2026-06-08
CVE-2026-11558 CodeAstro Payroll System home_salary.php sql injection — Payroll System CWE-89 6.3 Medium 2026-06-08
CVE-2026-11510 CodeAstro Leave Management System add_leave.php sql injection — Leave Management System CWE-89 6.3 Medium 2026-06-08
CVE-2026-11509 CodeAstro Leave Management System search_staff_for_updation.php sql injection — Leave Management System CWE-89 6.3 Medium 2026-06-08
CVE-2026-11508 CodeAstro Leave Management System search_staff_to_assign_pc.php sql injection — Leave Management System CWE-89 6.3 Medium 2026-06-08
CVE-2026-11507 CodeAstro Leave Management System delete_leave_type.php sql injection — Leave Management System CWE-89 6.3 Medium 2026-06-08
CVE-2026-11506 CodeAstro Leave Management System search_staff_for_deletion.php sql injection — Leave Management System CWE-89 6.3 Medium 2026-06-08
CVE-2026-11495 CodeAstro Ingredients Stock Management System add_stock.php sql injection — Ingredients Stock Management System CWE-89 6.3 Medium 2026-06-08
CVE-2026-11491 CodeAstro Human Resource Management System Notice Board Management All_notice cross site scripting — Human Resource Management System CWE-79 2.4 Low 2026-06-08
CVE-2026-10286 CodeAstro Payroll System home_employee.php sql injection — Payroll System CWE-89 6.3 Medium 2026-06-01
CVE-2026-10261 CodeAstro Online Job Portal application_status.php sql injection — Online Job Portal CWE-89 7.3 High 2026-06-01
CVE-2026-10260 CodeAstro Online Job Portal delete-jobs.php sql injection — Online Job Portal CWE-89 7.3 High 2026-06-01
CVE-2026-10235 CodeAstro Ingredients Stock Management System stock_manager.php sql injection — Ingredients Stock Management System CWE-89 6.3 Medium 2026-06-01
CVE-2026-9542 CodeAstro Leave Management System add_staff.php sql injection — Leave Management System CWE-89 6.3 Medium 2026-05-26
CVE-2026-8231 CodeAstro Online Catering Ordering System deleteorder.php sql injection — Online Catering Ordering System CWE-89 6.3 Medium 2026-05-10
CVE-2026-8132 CodeAstro Leave Management System login.php sql injection — Leave Management System CWE-89 7.3 High 2026-05-08
CVE-2026-8097 CodeAstro Online Classroom askquery.php sql injection — Online Classroom CWE-89 6.3 Medium 2026-05-07
CVE-2026-7745 CodeAstro Online Classroom facultydetails sql injection — Online Classroom CWE-89 6.3 Medium 2026-05-04
CVE-2026-7744 CodeAstro Online Classroom addnewstudent sql injection — Online Classroom CWE-89 6.3 Medium 2026-05-04
CVE-2026-7743 CodeAstro Online Classroom studentdetails sql injection — Online Classroom CWE-89 6.3 Medium 2026-05-04
CVE-2026-7742 CodeAstro Online Classroom facultylogin sql injection — Online Classroom CWE-89 6.3 Medium 2026-05-04
CVE-2026-7741 CodeAstro Online Classroom studentlogin sql injection — Online Classroom CWE-89 6.3 Medium 2026-05-04
CVE-2026-7196 CodeAstro Online Classroom guestdetails sql injection — Online Classroom CWE-89 6.3 Medium 2026-04-27
CVE-2026-7148 CodeAstro Online Classroom addnewfaculty sql injection — Online Classroom CWE-89 6.3 Medium 2026-04-27
CVE-2026-7071 CodeAstro Online Job Portal user-cvs file information disclosure — Online Job Portal CWE-538 5.3 Medium 2026-04-27

This page lists every published CVE security advisory associated with CodeAstro. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.