CVE-2026-36387

6.5 Moyenne

Publiée le 07/05/2026 à 18:16 · Modifiée le 05/07/2026 à 04:17 · Analyse NVD reportée · Source : cve@mitre.org

Description

A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /add_members.php. This vulnerability affects the file upload functionality, where improper file sanitization allows attackers to inject malicious files which leads RCE.

Traduire en français

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N`

Faiblesses (CWE)

CWE-434

Références

https://github.com/raneishajustin/CVE/tree/main/CVE-2026-36387
https://github.com/raneishajustin/CVE/tree/main/CVE-2026-36387

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories