Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parameter.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-70149 CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parameter. https://www.cve.org/CVERecord?id=CVE-2025-70149
Post summary
The post announces that CodeAstro Membership Management System 1.0 is vulnerable to SQL injection in print_membership_card.php via the ID parameter, without mentioning any PoC, exploit code, or patch.
🔴 CVE-2025-70149 - Critical CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in print_membership_card.php via the ID parameter. https://www.thehackerwire.com/vulnerability/CVE-2025-70149/ https://t.co/CKqU4NN2h8
Post summary
CVE-2025-70149 is a critical SQL injection flaw in CodeAstro Membership Management System 1.0, targeting the ID parameter in print_membership_card.php; the post announces the vulnerability but does not provide exploitation, patch, or PoC details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | codeastro | membership_management_system | 1.0 | - | - |