Vendor
SQL Injection in CodeAstro Apartment Visitor Management System
1 rule 1 TTP 1 CVECodeAstro Apartment Visitor Management System 1.0 is vulnerable to remote unauthenticated SQL injection in the 'secode' parameter of 'forgotpw.php', allowing potential unauthorized database access.
SQL Injection Vulnerability in CodeAstro Online Classroom 1.0 (CVE-2026-16765)
1 rule 1 TTP 1 CVE 6 IOCsA high-severity SQL injection vulnerability, CVE-2026-16765, exists in CodeAstro Online Classroom 1.0, specifically in the `/OnlineClassroom/loginlinkadmin.php` file, which allows remote unauthenticated attackers to manipulate the `aid` argument, leading to potential data exfiltration and database compromise, with public exploit disclosure increasing immediate risk.
CVE-2026-15134: SQL Injection in CodeAstro Simple Online Leave Management System
1 rule 2 TTPs 1 CVEA high-severity SQL injection vulnerability (CVE-2026-15134) in CodeAstro Simple Online Leave Management System 1.0, specifically within the '/SimpleOnlineLeave/index.php' file, allows a remote unauthenticated attacker to execute arbitrary SQL commands by manipulating the 'email' argument, leading to unauthorized database access and data compromise, with a public exploit available.
CVE-2026-14640: CodeAstro Apartment Visitor Management System SQL Injection
1 rule 1 TTP 1 CVE 6 IOCsA critical SQL injection vulnerability (CVE-2026-14640) in CodeAstro Apartment Visitor Management System 1.0 allows remote attackers to execute arbitrary SQL queries via manipulation of the 'Username' argument in the Login component's '/index.php' file, leading to unauthorized data access, modification, and potential system compromise.
CodeAstro Leave Management System SQL Injection Vulnerability
2 rules 1 TTP 1 CVEA SQL injection vulnerability (CVE-2026-8132) exists in CodeAstro Leave Management System 1.0 via manipulation of the txt_username parameter in /login.php, enabling remote exploitation and potential database compromise.