Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CodeAstro — Vulnerabilities & Security Advisories 174

Browse all 174 CVE security advisories affecting CodeAstro. AI-powered Chinese analysis, POCs, and references for each vulnerability.

CodeAstro operates as a software development and IT services provider, primarily focusing on custom application development and digital transformation solutions for enterprise clients. Security audits have identified a significant volume of vulnerabilities within its ecosystem, with 122 CVEs currently on record. These flaws predominantly involve remote code execution and cross-site scripting, indicating persistent weaknesses in input validation and session management across various deployed modules. Additionally, several instances of privilege escalation have been documented, suggesting inadequate access control mechanisms in legacy systems. While no single catastrophic breach has been publicly attributed solely to CodeAstro, the high frequency of critical severity ratings highlights systemic issues in their secure development lifecycle. Recent patches have addressed some remote execution vectors, yet the sheer number of outstanding issues necessitates rigorous third-party security assessments to mitigate ongoing risks for dependent organizations.

CVE ID Title CVSS Severity Published
CVE-2024-11677 CodeAstro Hospital Management System Add Vendor Details Page his_admin_add_vendor.php cross site scripting — Hospital Management System CWE-79 3.5 Low 2024-11-26
CVE-2024-11676 CodeAstro Hospital Management System Add Laboratory Equipment Page his_admin_add_lab_equipment.php cross site scripting — Hospital Management System CWE-79 3.5 Low 2024-11-26
CVE-2024-11675 CodeAstro Hospital Management System Add Patient Details Page his_admin_register_patient.php cross site scripting — Hospital Management System CWE-79 3.5 Low 2024-11-26
CVE-2024-11674 CodeAstro Hospital Management System his_doc_update-account.php unrestricted upload — Hospital Management System CWE-434 6.3 Medium 2024-11-25
CVE-2024-11058 CodeAstro Real Estate Management System About Us Page aboutedit.php sql injection — Real Estate Management System CWE-89 4.7 Medium 2024-11-10
CVE-2024-11000 CodeAstro Real Estate Management System About Us Page aboutedit.php unrestricted upload — Real Estate Management System CWE-434 4.7 Medium 2024-11-08
CVE-2024-10999 CodeAstro Real Estate Management System About Us Page aboutadd.php unrestricted upload — Real Estate Management System CWE-434 4.7 Medium 2024-11-08
CVE-2024-7912 CodeAstro Online Railway Reservation System assets exposure of information through directory listing — Online Railway Reservation System CWE-548 5.3 Medium 2024-08-18
CVE-2024-7910 CodeAstro Online Railway Reservation System Profile Photo Update emp-profile-avatar.php unrestricted upload — Online Railway Reservation System CWE-434 4.7 Medium 2024-08-18
CVE-2024-7815 CodeAstro Online Railway Reservation System Update Employee Page admin-update-employee.php cross site scripting — Online Railway Reservation System CWE-79 2.4 Low 2024-08-15
CVE-2024-7814 CodeAstro Online Railway Reservation System Add Employee Page admin-add-employee.php cross site scripting — Online Railway Reservation System CWE-79 2.4 Low 2024-08-15
CVE-2024-2351 CodeAstro Ecommerce Site Search action.php sql injection — Ecommerce Site CWE-89 6.3 Medium 2024-03-09
CVE-2024-2333 CodeAstro Membership Management System add_members.php sql injection — Membership Management System CWE-89 6.3 Medium 2024-03-09
CVE-2024-2149 CodeAstro Membership Management System settings.php sql injection — Membership Management System CWE-89 4.7 Medium 2024-03-03
CVE-2024-2076 CodeAstro House Rental Management System tenant.php missing authentication — House Rental Management System CWE-306 5.3 Medium 2024-03-01
CVE-2024-1924 CodeAstro Membership Management System get_membership_amount.php sql injection — Membership Management System CWE-89 6.3 Medium 2024-02-27
CVE-2024-1825 CodeAstro House Rental Management System User Registration Page cross site scripting — House Rental Management System CWE-79 4.3 Medium 2024-02-23
CVE-2024-1824 CodeAstro House Rental Management System signing.php sql injection — House Rental Management System CWE-89 7.3 High 2024-02-23
CVE-2024-1823 CodeAstro Simple Voting System Backend users.php access control — Simple Voting System CWE-284 5.3 Medium 2024-02-23
CVE-2024-1819 CodeAstro Membership Management System Add Members Tab unrestricted upload — Membership Management System CWE-434 4.7 Medium 2024-02-23
CVE-2024-1818 CodeAstro Membership Management System Logo unrestricted upload — Membership Management System CWE-434 4.7 Medium 2024-02-23
CVE-2024-1268 CodeAstro Restaurant POS System update_product.php unrestricted upload — Restaurant POS System CWE-434 6.3 Medium 2024-02-07
CVE-2024-1267 CodeAstro Restaurant POS System create_account.php cross site scripting — Restaurant POS System CWE-79 3.5 Low 2024-02-07
CVE-2024-1266 CodeAstro University Management System Student Registration Form st_reg.php cross site scripting — University Management System CWE-79 2.4 Low 2024-02-07
CVE-2024-1265 CodeAstro University Management System Attendance Management att_add.php cross site scripting — University Management System CWE-79 2.4 Low 2024-02-07
CVE-2024-1199 CodeAstro Employee Task Management System attendance-info.php denial of service — Employee Task Management System CWE-404 5.4 Medium 2024-02-03
CVE-2024-1103 CodeAstro Real Estate Management System Feedback Form profile.php cross site scripting — Real Estate Management System CWE-79 3.5 Low 2024-01-31
CVE-2024-1031 CodeAstro Expense Management System Add Expenses Page 5-Add-Expenses.php cross site scripting — Expense Management System CWE-79 3.5 Low 2024-01-30
CVE-2024-1022 CodeAstro Simple Student Result Management System Add Class Page add_classes.php cross site scripting — Simple Student Result Management System CWE-79 2.4 Low 2024-01-29
CVE-2024-0958 CodeAstro Stock Management System Add Category index.php cross site scripting — Stock Management System CWE-79 3.5 Low 2024-01-27

This page lists every published CVE security advisory associated with CodeAstro. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.