CVE Catalog
CVE-2025-69931
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.14%
4th percentile - higher than 4% of all known CVEs
Summary
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /delete_membership.php?id=1.
Risk Assessment
An attacker can delete memberships without authorization, leading to data loss and disruption of member management.
Recommendation
Use prepared SQL statements in delete_membership.php and require authentication before deleting memberships.
Original NVD description (English source)
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /delete_membership.php?id=1.