Codeastro Complaint Management System — known CVE vulnerabilities

Every CVE whose affected-product data names Codeastro Complaint Management System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2024-55507 — CVSS 9.8 (critical): An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the delete_e.php component.
• CVE-2024-55509 — CVSS 9.8 (critical): SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate…
• CVE-2024-55505 — CVSS 8.8 (high): An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component.
• CVE-2024-55506 — CVSS 8.8 (high): An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 (version with 0 updates) enables an attacker to execute arbitrary…
• CVE-2024-56889 — CVSS 7.5 (high): Incorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to…