Executive brief
CodeAstro Membership Management System is a PHP-based application for managing organizational memberships. The print_membership_card.php endpoint fails to enforce authentication and authorization, allowing unauthenticated attackers to retrieve sensitive personal information (full names, dates of birth, contact details, email addresses, and membership data) for any member by manipulating the user ID parameter. This exposure could enable identity theft, social engineering, or targeted harassment of organization members.
Technical details
The vulnerability is an Insecure Direct Object Reference (IDOR) caused by missing authentication and authorization checks in print_membership_card.php. The endpoint directly processes the user-supplied 'id' parameter via GET request without verifying a valid session or confirming the requester has permission to access that member's data. An unauthenticated attacker can send a simple HTTP GET request (e.g., /print_membership_card.php?id=1) and receive the full membership card including PII. The vulnerable code constructs a SQL query directly from the user input without session validation. The attack requires no special privileges, user interaction, or complex exploitation techniques—only network access to the vulnerable endpoint.
Affected products
- CodeAstro Membership Management System 1.0
Timeline
- 2026-02-20: disclosed: Security research blog published
- 2026-02-18: advisory