CVE-2025-70149: SQL Injection
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in printmembershipcard.php via the ID parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-70149?
CVE-2025-70149 is classified as a high severity vulnerability due to its potential to allow unauthorized access to sensitive database information through SQL Injection.
How do I fix CVE-2025-70149?
To fix CVE-2025-70149, sanitize and parameterize all SQL queries in the print_membership_card.php file to prevent SQL Injection attacks.
What software is affected by CVE-2025-70149?
CVE-2025-70149 affects the CodeAstro Membership Management System version 1.0.
What type of vulnerability is CVE-2025-70149?
CVE-2025-70149 is an SQL Injection vulnerability that allows attackers to manipulate SQL queries through user input.
Can CVE-2025-70149 be exploited remotely?
Yes, CVE-2025-70149 can be exploited remotely if an attacker has access to the print_membership_card.php script with an injectable ID parameter.