A Remote Code Execution (RCE) vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upload validation in the profilepic parameter within pagesviewclient.php.
A Stored Cross-Site Scripting (XSS) vulnerability exists in the name parameter of pagesaddacctype.php in Code Astro Internet Banking System 2.0.0.