The CodeAstro Membership Management System 1.0 is affected by a SQL Injection vulnerability in the /edit_member.php?id=1 parameter. This vulnerability enables attackers to inject malicious SQL code, which could compromise the confidentiality and integrity of the underlying database. The vulnerability is publicly known but lacks a CVSS score and vendor remediation information.

Successful exploitation of this SQL Injection vulnerability could allow attackers to read, modify, or delete database contents, potentially exposing sensitive membership data or disrupting system operations. However, no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid exposing the vulnerable endpoint publicly or implement input validation and parameterized queries as a temporary mitigation.