Codeastro Internet Banking System — known CVE vulnerabilities

Every CVE whose affected-product data names Codeastro Internet Banking System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2025-29017 — CVSS 8.8 (high): A Remote Code Execution (RCE) vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upload validation in…
• CVE-2024-56924 — CVSS 7.3 (high): A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking system 2.0.0 allows remote attackers to execute arbitrary…
• CVE-2024-0194 — CVSS 6.3 (medium): A vulnerability, which was classified as critical, has been found in CodeAstro Internet Banking System up to 1.0. This issue affects some…
• CVE-2025-29015 — CVSS 6.1 (medium): Code Astro Internet Banking System 2.0.0 is vulnerable to Cross Site Scripting (XSS) via the name parameter in /admin/pages_account.php.
• CVE-2025-29018 — CVSS 4.8 (medium): A Stored Cross-Site Scripting (XSS) vulnerability exists in the name parameter of pages_add_acc_type.php in Code Astro Internet Banking…