Codeastro Complaint Management System vulnerabilities

7 vulnerabilities

Known vulnerabilities in Codeastro Complaint Management System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2024-55509codeastrocomplaint_management_system
EPSS score
0.82%
SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component.8.8CVE-2024-55505codeastrocomplaint_management_system
EPSS score
0.70%
An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component.8.8CVE-2024-55506codeastrocomplaint_management_system
EPSS score
0.70%
An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 (version with 0 updates) enables an attacker to execute arbitrary code and obtain sensitive information via the delete.php file and modifying the id parameter.9.8CVE-2024-55507codeastrocomplaint_management_system
EPSS score
0.63%
An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the delete_e.php component.7.5CVE-2024-56889codeastrocomplaint_management_system
EPSS score
0.69%
Incorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modification of the id parameter.5.1CVE-2026-13558codeastrocomplaint_management_system
EPSS score
0.35%
A security flaw has been discovered in CodeAstro Complaint Management System 1.0. This issue affects some unknown processing of the file /report/addreport of the component Report Handler. Performing a manipulation of the argument Report Title results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.6.4CVE-2026-13549codeastrocomplaint_management_system
EPSS score
0.51%
A security flaw has been discovered in CodeAstro Complaint Management System 1.0. The affected element is the function deletereport of the file application/controllers/Report.php of the component Report Endpoint. The manipulation results in authorization bypass. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.