CVE Catalog
CVE-2025-69938
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.14%
4th percentile - higher than 4% of all known CVEs
Summary
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType.
Risk Assessment
An attacker can alter membership types or gain unauthorized access to member data, compromising system integrity.
Recommendation
Use prepared SQL statements in renew.php and filter the membershipType parameter to prevent injections.
Original NVD description (English source)
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType.