CodeAstro vulnerabilities
We track 86 vulnerabilities in CodeAstro products across 34 products. 86 are rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2026.
Latest CodeAstro vulnerabilities
- 9.8 Critical severity
Internet Banking System: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, has been found in CodeAstro Internet Banking System up to 1.0. This issue affects some unknown processing of the file pages_account.php of the component Profile Picture Handler. The manipulation leads to unres
- 8.8 High severity
POS and Inventory Management System: Improper Access Control
A vulnerability has been found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /accounts_con/register_account of the component User Creation Handler. The
- 8.8 High severity
POS System: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /setting of the component Logo Handler. The manipulation leads to unrestricted upload. The attack may be laun
- 8.8 High severity
POS System: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in CodeAstro POS System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /profil of the component Profile Picture Handler. The manipulation leads to unrestricted upload. The
- 9.8 Critical severity
Internet Banking System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in CodeAstro Internet Banking System 1.0 and classified as critical. This issue affects some unknown processing of the file pages_reset_pwd.php. The manipulation of the argument email leads to sql injection. The attack may be initiate
- 7.2 High severity
Restaurant Pos System: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in add_product.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.