Membership management system

This hub aggregates every CVE we track for Membership management system, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Membership management system.

• CVE-2025-70150CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated attackers to delete arbitrary member records via the id ...9.8Feb 18, 2026
• CVE-2025-70148Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access membership card data of arbitrary user...7.5Feb 18, 2026
• CVE-2025-70149CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parameter.9.8Feb 18, 2026
• CVE-2025-3998CodeAstro Membership Management System renew.php sql injection7.3Apr 28, 2025
• CVE-2024-46236CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the address parameter in add_members.php and edit_member.php.5.4Oct 21, 2024
• CVE-2024-48709CodeAstro Membership Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the membershipType parameter in edit_type.php5.4Oct 21, 2024
• CVE-2024-46471The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and contents of directories, potentially revealing sensitive information.7.5Sep 27, 2024
• CVE-2024-46472CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page.8.6Sep 27, 2024
• CVE-2024-46470Cross Site Scripting vulnerability in CodeAstro Membership Management System 1.0 allows attackers to run malicious JavaScript via the membership_type field in the edit-type.php component.6.1Sep 27, 2024
• CVE-2024-45528CodeAstro MembershipM-PHP (aka Membership Management System in PHP) 1.0 allows add_members.php fullname stored XSS.5.4Sep 2, 2024
• CVE-2024-2333CodeAstro Membership Management System add_members.php sql injection6.3Mar 9, 2024
• CVE-2024-2149CodeAstro Membership Management System settings.php sql injection4.7Mar 3, 2024
• CVE-2024-25868A Cross Site Scripting (XSS) vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary code via the membershipType parameter in the add_type...6.1Feb 28, 2024
• CVE-2024-25869An Unrestricted File Upload vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary code via upload of a crafted php file in the settings....8.8Feb 28, 2024
• CVE-2024-25866A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the email parameter in the index.php component.8.8Feb 28, 2024