CVE-2025-70150 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated attackers to delete…
Critical CVSS: 9.8

CVE-2025-70150

CodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in delete_members.php that allows unauthenticated attackers to delete arbitrary member records via the id parameter.
Vendor
Codeastro
Product
Membership Management System
CWE
CWE-862
Yayın Tarihi
2026-02-18 18:24:20
Güncelleme
2026-02-23 16:13:10
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-862 Membership Management System CRITICAL Codeastro 2026

Referanslar

https://www.phpscriptsonline.com/product/membership-management-software https://youngkevinn.github.io/posts/CVE-2025-70150-Membership-Unauth-Delete/ https://youngkevinn.github.io/posts/CVE-2025-70150-Membership-Unauth-Delete/