CVE-2025-69930

CriticalCVSS 9.8

Published: 30/07/2026(UTC)Updated: 31/07/2026(UTC)Translated: 31/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

CodeAstro Membership Management System 1.0 is vulnerable to SQL injection in /print_membership_card.php via the id parameter. An attacker can exploit this flaw to execute unauthorized database queries.

Risk Assessment

Risk includes potential leakage of sensitive member data and the ability to modify or delete database records.

Recommendation

Immediately update the system to the latest version or use parameterized SQL queries to prevent injection.

Original NVD description (English source)

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /print_membership_card.php?id=1.