CVE Catalog
CVE-2025-69937
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.14%
4th percentile - higher than 4% of all known CVEs
Summary
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edit_type.php endpoint via the Parameter id.
Risk Assessment
An attacker can modify membership types, potentially leading to privilege escalation or data breach.
Recommendation
Use parameterized SQL queries in edit_type.php and verify permissions before editing types.
Original NVD description (English source)
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edit_type.php endpoint via the Parameter id.