Filtered by vendor Codeastro Subscriptions
Filtered by product Complaint Management System Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-55506 1 Codeastro 1 Complaint Management System 2025-04-03 8.8 High
An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 (version with 0 updates) enables an attacker to execute arbitrary code and obtain sensitive information via the delete.php file and modifying the id parameter.
CVE-2024-55509 1 Codeastro 1 Complaint Management System 2025-04-03 9.8 Critical
SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component.
CVE-2024-55507 1 Codeastro 1 Complaint Management System 2025-04-03 9.8 Critical
An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the delete_e.php component.