CVE-2025-69936

CriticalCVSS 9.8

Published: 30/07/2026(UTC)Updated: 31/07/2026(UTC)Translated: 31/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1.

An attacker can edit member data without authorization, compromising data confidentiality and integrity.

Use prepared SQL statements in edit_member.php and restrict access to this file to authorized users only.

Original NVD description (English source)

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1.