CVE-2026-104625CodeAstro Simple Loan Management System index.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Loan Management System Published 10/02/2026 Severity Medium CVE-2026-104614CodeAstro Simple Pharmacy Management System delete.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Pharmacy Management System Published 10/02/2026 Severity Medium CVE-2026-104613CodeAstro Simple Pharmacy Management System view.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Pharmacy Management System Published 10/02/2026 Severity Medium CVE-2026-94048CodeAstro QR Code Attendance Management System UserController.php save privileges management Exploitation status Public exploit Fix Not confirmed Affected product Q QR Code Attendance Management System Published 09/20/2026 Severity Medium CVE-2026-77681CodeAstro Online Job Portal update-profile.php unrestricted upload Exploitation status Public exploit Fix Not confirmed Affected product O Online Job Portal Published 08/21/2026 Severity Medium CVE-2026-77020CodeAstro Apartment Visitor Management System password-recovery.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Apartment Visitor Management System Published 08/20/2026 Severity Medium CVE-2026-77019CodeAstro Apartment Visitor Management System forgotpw.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Apartment Visitor Management System Published 08/20/2026 Severity Medium CVE-2026-16765CodeAstro Online Classroom loginlinkadmin.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Classroom Published 07/23/2026 Severity Medium CVE-2026-15559CodeAstro Simple Online Leave Management System POST accept.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Leave Management System Published 07/13/2026 Severity Medium CVE-2026-15558CodeAstro Simple Online Leave Management System deletemp.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Leave Management System Published 07/13/2026 Severity Medium CVE-2026-15523CodeAstro Simple Online Leave Management System dashboard.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Leave Management System Published 07/13/2026 Severity Medium CVE-2026-15134CodeAstro Simple Online Leave Management System index.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Leave Management System Published 07/08/2026 Severity Medium CVE-2026-14799CodeAstro Ecommerce Website my_account.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product E Ecommerce Website Published 07/06/2026 Severity Medium CVE-2026-14798CodeAstro Apartment Visitor Management System visitor-entry.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Apartment Visitor Management System Published 07/06/2026 Severity Medium CVE-2026-14797CodeAstro Apartment Visitor Management System edit-apartment.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Apartment Visitor Management System Published 07/06/2026 Severity Medium CVE-2026-14796CodeAstro Apartment Visitor Management System report.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Apartment Visitor Management System Published 07/06/2026 Severity Medium CVE-2026-14795CodeAstro Apartment Visitor Management System action-visitor.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Apartment Visitor Management System Published 07/06/2026 Severity Medium CVE-2026-14767CodeAstro Ecommerce Website POST Parameter confirm.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product E Ecommerce Website Published 07/05/2026 Severity Medium CVE-2026-14766CodeAstro Apartment Visitor Management System POST Parameter search-result.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Apartment Visitor Management System Published 07/05/2026 Severity Medium CVE-2026-14689CodeAstro Apartment Visitor Management System add-apartment.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Apartment Visitor Management System Published 07/05/2026 Severity Medium CVE-2026-14640CodeAstro Apartment Visitor Management System Login index.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Apartment Visitor Management System Published 07/04/2026 Severity Medium CVE-2026-14639CodeAstro Ecommerce Website my_account.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product E Ecommerce Website Published 07/04/2026 Severity Medium CVE-2026-13558CodeAstro Complaint Management System Report addreport cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product C Complaint Management System Published 06/29/2026 Severity Medium CVE-2026-13549CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization Exploitation status Public exploit Fix Not confirmed Affected product C Complaint Management System Published 06/29/2026 Severity Medium CVE-2026-13537CodeAstro Human Resource Management System cross-site request forgery Exploitation status Public exploit Fix Not confirmed Affected product H Human Resource Management System Published 06/29/2026 Severity Medium CVE-2026-13535CodeAstro Human Resource Management System View Endpoint Employee_model.php GetFileInfo sql injection Exploitation status Public exploit Fix Not confirmed Affected product H Human Resource Management System Published 06/29/2026 Severity Medium CVE-2026-13525CodeAstro Human Resource Management System Update_Earn_Leave Endpoint Employee_model.php emselectByCode sql injection Exploitation status Public exploit Fix Affected product H Human Resource Management System Published 06/29/2026 Severity Medium CVE-2026-12175CodeAstro Student Attendance Management System createStudents.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Student Attendance Management System Published 06/13/2026 Severity Medium CVE-2026-12131CodeAstro Human Resource Management System Payroll Invoice Payroll.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product H Human Resource Management System Published 06/12/2026 Severity Medium CVE-2026-12130CodeAstro Human Resource Management System Projects Management Add_Projects cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product H Human Resource Management System Published 06/12/2026 Severity Medium CVE-2026-12129CodeAstro Human Resource Management System Dashboard add_tod cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product H Human Resource Management System Published 06/12/2026 Severity Medium CVE-2026-11585CodeAstro Student Attendance Management System createClassArms.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Student Attendance Management System Published 06/08/2026 Severity Medium CVE-2026-11584CodeAstro Student Attendance Management System createClass.php edit sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Student Attendance Management System Published 06/08/2026 Severity Medium CVE-2026-11583CodeAstro Student Attendance Management System createClass.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Student Attendance Management System Published 06/08/2026 Severity Medium CVE-2026-11582CodeAstro Student Attendance Management System index.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Student Attendance Management System Published 06/08/2026 Severity Medium CVE-2026-11559CodeAstro Payroll System view_account.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product P Payroll System Published 06/08/2026 Severity Medium CVE-2026-11558CodeAstro Payroll System home_salary.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product P Payroll System Published 06/08/2026 Severity Medium CVE-2026-11510CodeAstro Leave Management System add_leave.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product L Leave Management System Published 06/08/2026 Severity Medium CVE-2026-11509CodeAstro Leave Management System search_staff_for_updation.php sql injection Exploitation status Not known exploited Fix Not confirmed Affected product L Leave Management System Published 06/08/2026 Severity Medium CVE-2026-11508CodeAstro Leave Management System search_staff_to_assign_pc.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product L Leave Management System Published 06/08/2026 Severity Medium CVE-2026-11507CodeAstro Leave Management System delete_leave_type.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product L Leave Management System Published 06/08/2026 Severity Medium CVE-2026-11506CodeAstro Leave Management System search_staff_for_deletion.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product L Leave Management System Published 06/08/2026 Severity Medium CVE-2026-11495CodeAstro Ingredients Stock Management System add_stock.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product I Ingredients Stock Management System Published 06/08/2026 Severity Medium CVE-2026-11491CodeAstro Human Resource Management System Notice Board Management All_notice cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product H Human Resource Management System Published 06/08/2026 Severity Medium CVE-2026-10286CodeAstro Payroll System home_employee.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product P Payroll System Published 06/01/2026 Severity Medium CVE-2026-10261CodeAstro Online Job Portal application_status.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Job Portal Published 06/01/2026 Severity Medium CVE-2026-10260CodeAstro Online Job Portal delete-jobs.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Job Portal Published 06/01/2026 Severity Medium CVE-2026-10235CodeAstro Ingredients Stock Management System stock_manager.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product I Ingredients Stock Management System Published 06/01/2026 Severity Medium CVE-2026-9542CodeAstro Leave Management System add_staff.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product L Leave Management System Published 05/26/2026 Severity Medium CVE-2026-8231CodeAstro Online Catering Ordering System deleteorder.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Catering Ordering System Published 05/10/2026 Severity Medium CVE-2026-8132CodeAstro Leave Management System login.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product L Leave Management System Published 05/08/2026 Severity Medium CVE-2026-8097CodeAstro Online Classroom askquery.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Classroom Published 05/07/2026 Severity Medium CVE-2026-7745CodeAstro Online Classroom facultydetails sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Classroom Published 05/04/2026 Severity Medium CVE-2026-7744CodeAstro Online Classroom addnewstudent sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Classroom Published 05/04/2026 Severity Medium CVE-2026-7743CodeAstro Online Classroom studentdetails sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Classroom Published 05/04/2026 Severity Medium CVE-2026-7742CodeAstro Online Classroom facultylogin sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Classroom Published 05/04/2026 Severity Medium CVE-2026-7741CodeAstro Online Classroom studentlogin sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Classroom Published 05/04/2026 Severity Medium CVE-2026-7196CodeAstro Online Classroom guestdetails sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Classroom Published 04/27/2026 Severity Medium CVE-2026-7148CodeAstro Online Classroom addnewfaculty sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Classroom Published 04/27/2026 Severity Medium CVE-2026-7071CodeAstro Online Job Portal user-cvs file information disclosure Exploitation status Public exploit Fix Not confirmed Affected product O Online Job Portal Published 04/27/2026 Severity Medium CVE-2026-7028CodeAstro Online Job Portal All Jobs delete-jobs.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Job Portal Published 04/26/2026 Severity Medium CVE-2026-6201CodeAstro Online Job Portal Delete Job Posting job-delete.php access control Exploitation status Public exploit Fix Not confirmed Affected product O Online Job Portal Published 04/13/2026 Severity Medium CVE-2026-6033CodeAstro Online Classroom updatedetailsfromstudent.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Classroom Published 04/10/2026 Severity Medium CVE-2026-6010CodeAstro Online Classroom takeassessment2.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Classroom Published 04/10/2026 Severity Medium CVE-2026-5580CodeAstro Online Classroom Parameter addvideos.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Classroom Published 04/05/2026 Severity Medium CVE-2026-5579CodeAstro Online Classroom Parameter updatedetailsfromfaculty.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Classroom Published 04/05/2026 Severity Medium CVE-2026-5578CodeAstro Online Classroom Parameter addassessment.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Classroom Published 04/05/2026 Severity Medium CVE-2026-3137CodeAstro Food Ordering System food_ordering.exe stack-based overflow Exploitation status Public exploit Fix Not confirmed Affected product F Food Ordering System Published 02/25/2026 Severity Medium CVE-2025-70149Exploitation status Public exploit Fix Not confirmed Affected product Not confirmed Published 02/18/2026 Severity Critical CVE-2025-70150Exploitation status Public exploit Fix Not confirmed Affected product Not confirmed Published 02/18/2026 Severity Critical CVE-2025-70148Exploitation status Public exploit Fix Not confirmed Affected product Not confirmed Published 02/18/2026 Severity High CVE-2025-14900CodeAstro Real Estate Management System Administrator Endpoint userdelete.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product R Real Estate Management System Published 12/19/2025 Severity Medium CVE-2025-14899CodeAstro Real Estate Management System Administrator Endpoint stateadd.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product R Real Estate Management System Published 12/19/2025 Severity Medium CVE-2025-14898CodeAstro Real Estate Management System Administrator Endpoint userbuilderdelete.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product R Real Estate Management System Published 12/18/2025 Severity Medium CVE-2025-14897CodeAstro Real Estate Management System Administrator Endpoint useragentdelete.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product R Real Estate Management System Published 12/18/2025 Severity Medium CVE-2025-13280CodeAstro Simple Inventory System Login index.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Inventory System Published 11/17/2025 Severity Medium CVE-2025-13172CodeAstro Gym Management System view-member-report.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product G Gym Management System Published 11/14/2025 Severity Medium CVE-2025-12610CodeAstro Gym Management System view-progress-report.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product G Gym Management System Published 11/03/2025 Severity Medium CVE-2025-12609CodeAstro Gym Management System update-progress.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product G Gym Management System Published 11/03/2025 Severity Medium CVE-2025-12261CodeAstro Gym Management System remove-announcement.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product G Gym Management System Published 10/27/2025 Severity Medium CVE-2025-12242CodeAstro Gym Management System check-attendance.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product G Gym Management System Published 10/27/2025 Severity Medium CVE-2025-11611SourceCodester Simple Inventory System user.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Inventory System Published 10/11/2025 Severity Medium CVE-2025-11610SourceCodester Simple Inventory System brand.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Inventory System Published 10/11/2025 Severity Medium CVE-2025-11593CodeAstro Gym Management System delete-equipment.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product G Gym Management System Published 10/11/2025 Severity Medium CVE-2025-11592CodeAstro Gym Management System edit-equipmentform.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product G Gym Management System Published 10/11/2025 Severity Medium CVE-2025-11591CodeAstro Gym Management System delete-member.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product G Gym Management System Published 10/11/2025 Severity Medium CVE-2025-11590CodeAstro Gym Management System equipment-entry.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product G Gym Management System Published 10/11/2025 Severity Medium CVE-2025-11589CodeAstro Gym Management System user-payment.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product G Gym Management System Published 10/10/2025 Severity Medium CVE-2025-11588CodeAstro Gym Management System index.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product G Gym Management System Published 10/10/2025 Severity Medium CVE-2025-11359code-projects Simple Banking System transfermoney.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Banking System Published 10/07/2025 Severity Medium CVE-2025-11358code-projects Simple Banking System removeuser.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Banking System Published 10/07/2025 Severity Medium CVE-2025-11357code-projects Simple Banking System createuser.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Banking System Published 10/07/2025 Severity Medium CVE-2025-11118CodeAstro Student Grading System adminLogin.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Student Grading System Published 09/28/2025 Severity Medium CVE-2025-11114CodeAstro Online Leave Application leaveAplicationForm.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Leave Application Published 09/28/2025 Severity Medium CVE-2025-11113CodeAstro Online Leave Application signup.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Leave Application Published 09/28/2025 Severity Medium CVE-2025-11104CodeAstro Electricity Billing System bill.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product E Electricity Billing System Published 09/28/2025 Severity Medium CVE-2025-10780CodeAstro Simple Pharmacy Management view.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Pharmacy Management Published 09/22/2025 Severity Medium CVE-2025-9942CodeAstro Real Estate Management System submitproperty.php unrestricted upload Exploitation status Public exploit Fix Not confirmed Affected product R Real Estate Management System Published 09/04/2025 Severity Medium CVE-2025-9941CodeAstro Real Estate Management System register.php unrestricted upload Exploitation status Public exploit Fix Not confirmed Affected product R Real Estate Management System Published 09/04/2025 Severity Medium CVE-2025-9940CodeAstro Real Estate Management System feature.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product R Real Estate Management System Published 09/04/2025 Severity Medium 
