CodeAstro Apartment Visitor Management System vulnerabilities
9 known CVE vulnerabilities in CodeAstro Apartment Visitor Management System, translated and rated.
- CVE-2026-77020High
CodeAstro Apartment Visitor Management System 1.0 is vulnerable to SQL injection in password-recovery.php via the email argument. The attack can be performed remotely, and the exploit is publicly available.
- CVE-2026-77019High
CodeAstro Apartment Visitor Management System 1.0 is vulnerable to SQL injection in /apartment-visitor/forgotpw.php via the secode argument. The attack can be performed remotely, and the exploit has been publicly disclosed.
- CVE-2026-14798Medium
A SQL injection vulnerability was found in CodeAstro Apartment Visitor Management System 1.0 in the visitor-entry.php file. Remote attackers can manipulate the visname argument to inject SQL. The exploit is publicly available.
- CVE-2026-14797Medium
A SQL injection vulnerability was found in CodeAstro Apartment Visitor Management System 1.0 in the file /apartment-visitor/edit-apartment.php. Manipulating the editid argument allows remote attack execution. The exploit has been publicly disclosed and may be used.
- CVE-2026-14796Medium
A SQL injection vulnerability was found in CodeAstro Apartment Visitor Management System 1.0 in the file /apartment-visitor/report.php. An attacker can remotely manipulate the fromdate argument, leading to SQL injection. The exploit has been made public, increasing the risk of exploitation.
- CVE-2026-14795Medium
A SQL injection vulnerability has been found in CodeAstro Apartment Visitor Management System 1.0 in the file /apartment-visitor/action-visitor.php. An attacker can remotely manipulate the 'remark' argument to inject SQL code. The exploit has been publicly disclosed, increasing the risk of exploitation.
- CVE-2026-14766Medium
A SQL injection vulnerability was found in CodeAstro Apartment Visitor Management System 1.0 in the file /apartment-visitor/search-result.php. An attacker can remotely manipulate the searchdata argument, leading to SQL injection. The exploit is publicly available.
- CVE-2026-14689Medium
A SQL injection vulnerability has been discovered in CodeAstro Apartment Visitor Management System 1.0 in the file /apartment-visitor/add-apartment.php. An attacker can remotely manipulate the apartmentno argument, leading to SQL injection. The exploit has been publicly released.
- CVE-2026-14640High
A SQL injection vulnerability was found in CodeAstro Apartment Visitor Management System 1.0 in the /index.php file within the Login component. Manipulating the Username argument allows an attacker to inject SQL code. The attack can be performed remotely and the exploit has been made public.

