broken-access-control 4

• CVE-2025-70150 - CodeAstro Membership Management System 1.0: Unauthenticated Broken Access Control + SQL Injection via delete_members.php May 22, 2025
• CVE-2025-70148 - CodeAstro Membership Management System 1.0: Unauthenticated IDOR Leads to PII Disclosure May 22, 2025
• CVE-2025-70146 - Online Time Table Generator 1.0: Unauthenticated Broken Access Control Allows Arbitrary Deletion May 21, 2025
• CVE-2025-70141 - Customer Support System 1.0: Unauthenticated Broken Access Control via ajax.php May 21, 2025