CVE-2024-56889

High CVSS: 7.5

Incorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modification of the id parameter.

Vendor

Codeastro

Product

Complaint Management System

CWE

CWE-284

Yayın Tarihi

2025-02-06 22:15:38

Güncelleme

2025-04-18 02:06:14

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-284 Complaint Management System HIGH Codeastro 2025

Referanslar

https://github.com/vigneshr232/CVE-2024-56889/blob/main/CVE-2024-56889.md

Benzer Kayıtlar

Medium

CVE-2026-3137

A security vulnerability has been detected in CodeAstro Food Ordering System 1.0. This affects an unknown function of th…

Critical

CVE-2025-70150

CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that al…

High

CVE-2025-70148

Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allo…

Critical

CVE-2025-70149

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parame…

Medium

CVE-2025-14899

A weakness has been identified in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the f…

Medium

CVE-2025-14900

A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. Affected is an unknown functi…