| Package | Affected versions | Patched versions |
|---|---|---|
| membership management system | = 1.0 |
Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access membership card data of arbitrary users via direct requests with a manipulated id parameter, resulting in insecure direct object reference (IDOR).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free