CVE-2025-70148Disclosure(codeastro / membership_management_system)

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access membership card data of arbitrary users via direct requests with a manipulated id parameter, resulting in insecure direct object reference (IDOR).

codeastro CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Other references

Weakness type (CWE)

CWE-862

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

membership_management_system

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Affected systems

Vendors

codeastro

Products

membership_management_system

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud229d
Disclosure
🚨*CVE* CVE-2025-70148 Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access members… https://www.cve.org/CVERecord?id=CVE-2025-70148 ----- Traducción: CVE-2025-70148 Fal… http://infoflow.cloud`
Post summary
The post announces CVE‑2025‑70148, highlighting a missing authentication flaw in CodeAstro’s print_membership_card.php that permits unauthenticated access to member data, but it offers no PoC, exploit, or patch details.
0000048
53 followersView on X
CVE@CVEnew229d
Disclosure
CVE-2025-70148 Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access members… https://www.cve.org/CVERecord?id=CVE-2025-70148
Post summary
A missing authentication and authorization flaw in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access member data, as reported in CVE-2025-70148.
00000366
56.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	codeastro	membership_management_system	1.0	-	-

Explore more

Back to dashboard codeastro CVEs membership_management_system vulnerabilities