A Remote Code Execution (RCE) vulnerability exists in CODEASTRO Membership Management System version 1.0. The flaw is located in the /add_members.php file, where improper sanitization of uploaded files allows attackers to inject malicious files and execute arbitrary code on the server. This vulnerability has a CVSS score of 6.5, indicating a medium severity level.