THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-70148 (HIGH 7.5) — Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access membership card data of arbitrary users via direct requests with a manipulated id parameter, resulting in insecure direct

[NVD] CVE-2025-70148 (HIGH 7.5) — Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access membership card data of arbitrary users via direct requests with a manipulated id parameter, resulting in insecure direct

lownvdPublished 2026-02-18

CVE-2025-70148 CVSS: 7.5 HIGH Published: 2026-02-18T18:24:19.790

Missing authentication and authorization in print_membership_card.php in CodeAstro Membership Management System 1.0 allows unauthenticated attackers to access membership card data of arbitrary users via direct requests with a manipulated id parameter, resulting in insecure direct object reference (IDOR).

Indicators of compromise

CVE-2025-70148cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-70148