Complaint Management System vulnerabilities
3 known vulnerabilities in Complaint Management System from CodeAstro. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Complaint Management System: Improper Access Control
Incorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modification of the id parameter.
- 9.8 Critical severity
Complaint Management System: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component.
- 8.8 High severity
Complaint Management System: Authorization Bypass Through User-Controlled Key
An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 (version with 0 updates) enables an attacker to execute arbitrary code and obtain sensitive information via the delete.php file and modifying the id parameter.