CVE Catalog

CVE-2025-69934

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.26%

18th percentile - higher than 18% of all known CVEs

Summary

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /delete_members.php?id=1.

Risk Assessment

An attacker can delete members without authorization, leading to data loss and system disruption.

Recommendation

Use prepared SQL statements in delete_members.php and require confirmation before deleting members.

Original NVD description (English source)

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /delete_members.php?id=1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS