Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CodeAstro — Vulnerabilities & Security Advisories 174

Browse all 174 CVE security advisories affecting CodeAstro. AI-powered Chinese analysis, POCs, and references for each vulnerability.

CodeAstro operates as a software development and IT services provider, primarily focusing on custom application development and digital transformation solutions for enterprise clients. Security audits have identified a significant volume of vulnerabilities within its ecosystem, with 122 CVEs currently on record. These flaws predominantly involve remote code execution and cross-site scripting, indicating persistent weaknesses in input validation and session management across various deployed modules. Additionally, several instances of privilege escalation have been documented, suggesting inadequate access control mechanisms in legacy systems. While no single catastrophic breach has been publicly attributed solely to CodeAstro, the high frequency of critical severity ratings highlights systemic issues in their secure development lifecycle. Recent patches have addressed some remote execution vectors, yet the sheer number of outstanding issues necessitates rigorous third-party security assessments to mitigate ongoing risks for dependent organizations.

CVE ID Title CVSS Severity Published
CVE-2025-9941 CodeAstro Real Estate Management System register.php unrestricted upload — Real Estate Management System CWE-434 6.3 Medium 2025-09-04
CVE-2025-9940 CodeAstro Real Estate Management System feature.php cross site scripting — Real Estate Management System CWE-79 3.5 Low 2025-09-04
CVE-2025-9939 CodeAstro Real Estate Management System propertyview.php cross site scripting — Real Estate Management System CWE-79 3.5 Low 2025-09-04
CVE-2025-9237 CodeAstro Ecommerce Website Edit Your Account my_account.php cross site scripting — Ecommerce Website CWE-79 3.5 Low 2025-08-20
CVE-2025-7153 CodeAstro Simple Hospital Management System POST Parameter doctor.html cross site scripting — Simple Hospital Management System CWE-79 3.5 Low 2025-07-08
CVE-2025-7148 CodeAstro Simple Hospital Management System POST Parameter patient.html cross site scripting — Simple Hospital Management System CWE-79 3.5 Low 2025-07-07
CVE-2025-7147 CodeAstro Patient Record Management System login.php sql injection — Patient Record Management System CWE-89 7.3 High 2025-07-07
CVE-2025-7133 CodeAstro Online Movie Ticket Booking System cross-site request forgery — Online Movie Ticket Booking System CWE-352 4.3 Medium 2025-07-07
CVE-2025-6664 CodeAstro Patient Record Management System cross-site request forgery — Patient Record Management System CWE-352 4.3 Medium 2025-06-25
CVE-2025-6478 CodeAstro Expense Management System cross-site request forgery — Expense Management System CWE-352 4.3 Medium 2025-06-22
CVE-2025-6452 CodeAstro Patient Record Management System Generate New Report Page cross site scripting — Patient Record Management System CWE-79 2.4 Low 2025-06-22
CVE-2025-6131 CodeAstro Food Ordering System POST Request Parameter edit cross site scripting — Food Ordering System CWE-79 2.4 Low 2025-06-16
CVE-2025-5611 CodeAstro Real Estate Management System submitpropertyupdate.php sql injection — Real Estate Management System CWE-89 6.3 Medium 2025-06-04
CVE-2025-5610 CodeAstro Real Estate Management System submitpropertydelete.php sql injection — Real Estate Management System CWE-89 6.3 Medium 2025-06-04
CVE-2025-5583 CodeAstro Real Estate Management System register.php sql injection — Real Estate Management System CWE-89 7.3 High 2025-06-04
CVE-2025-5582 CodeAstro Real Estate Management System profile.php sql injection — Real Estate Management System CWE-89 6.3 Medium 2025-06-04
CVE-2025-5581 CodeAstro Real Estate Management System index.php sql injection — Real Estate Management System CWE-89 7.3 High 2025-06-04
CVE-2025-5580 CodeAstro Real Estate Management System login.php sql injection — Real Estate Management System CWE-89 7.3 High 2025-06-04
CVE-2025-4811 CodeAstro Pharmacy Management System Login index.php sql injection — Pharmacy Management System CWE-89 7.3 High 2025-05-16
CVE-2025-3998 CodeAstro Membership Management System renew.php sql injection — Membership Management System CWE-89 7.3 High 2025-04-28
CVE-2025-3205 CodeAstro Student Grading System studentsubject.php sql injection — Student Grading System CWE-89 6.3 Medium 2025-04-04
CVE-2025-3204 CodeAstro Car Rental System returncar.php sql injection — Car Rental System CWE-89 6.3 Medium 2025-04-04
CVE-2024-13070 CodeAstro Online Food Ordering System Update User Page update_users.php sql injection — Online Food Ordering System CWE-89 6.3 Medium 2024-12-31
CVE-2024-13067 CodeAstro Online Food Ordering System All Users Page all_users.php access control — Online Food Ordering System CWE-284 5.3 Medium 2024-12-31
CVE-2024-13038 CodeAstro Simple Loan Management System Login index.php sql injection — Simple Loan Management System CWE-89 7.3 High 2024-12-30
CVE-2024-12981 CodeAstro Car Rental System bookingconfirm.php sql injection — Car Rental System CWE-89 6.3 Medium 2024-12-27
CVE-2024-12944 CodeAstro House Rental Management System signin.php sql injection — House Rental Management System CWE-89 7.3 High 2024-12-26
CVE-2024-12943 CodeAstro House Rental Management System ownersignup.php sql injection — House Rental Management System CWE-89 7.3 High 2024-12-26
CVE-2024-12941 CodeAstro Blood Donor Management System deletedannounce.php sql injection — Blood Donor Management System CWE-89 6.3 Medium 2024-12-26
CVE-2024-11678 CodeAstro Hospital Management System his_doc_register_patient.php cross site scripting — Hospital Management System CWE-79 3.5 Low 2024-11-26

This page lists every published CVE security advisory associated with CodeAstro. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.