Codeastro Internet Banking System vulnerabilities

5 CVEs affecting Codeastro Internet Banking System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-29015, published 2025-04-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-29017, published 2025-04-10. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A Remote Code Execution (RCE) vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upload validation in the profile_pic parameter within pages_view_client.php.
CVE-2024-0194, published 2024-01-02. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in CodeAstro Internet Banking System up to 1.0. This issue affects some unknown processing of the file pages_account.php of the…
CVE-2024-56924, published 2025-01-22. High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days. A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking system 2.0.0 allows remote attackers to execute arbitrary JavaScript on the admin page (pages_account), potentially…
CVE-2025-29015, published 2025-04-17. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. Code Astro Internet Banking System 2.0.0 is vulnerable to Cross Site Scripting (XSS) via the name parameter in /admin/pages_account.php.
CVE-2025-29018, published 2025-04-09. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. A Stored Cross-Site Scripting (XSS) vulnerability exists in the name parameter of pages_add_acc_type.php in Code Astro Internet Banking System 2.0.0.