← Database

CVE-2026-36387

MEDIUM CVSS: 6.5 Published: 2026-05-07 Modified: 2026-07-05

Description

A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /add_members.php. This vulnerability affects the file upload functionality, where improper file sanitization allows attackers to inject malicious files which leads RCE.

Affected Platforms

Unknown

Weakness Type

CWE-434

References