This vulnerability affects the file upload mechanism in CODEASTRO Membership Management System v1.0, specifically in the /add_members.php endpoint. Due to improper sanitization of uploaded files, an attacker can inject malicious files that result in remote code execution on the affected system. The vulnerability is publicly disclosed but lacks a CVSS score and vendor remediation details. The product is not a cloud service, so remediation depends on vendor or user patching.

Successful exploitation allows an attacker to execute arbitrary code remotely on the server hosting the vulnerable application. This can lead to full system compromise depending on the privileges of the application process. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the vulnerable functionality and implement strict file upload controls if possible.