CVE-2025-69938

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - cve@mitre.org

Published

2026-07-30

Last modified

2026-10-13

Weaknesses

CWE-89

References

• https://github.com/um-dsp/TaintRadar/blob/main/sql_injection_cves/codeastro/20250811-membership-management-system-renew…