CVE-2026-4550

🗓️ 22 Mar 2026 13:47:28Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 5 Views🌐 WEB

Database injection in Simple Gym Management System via Trainer_id or fname in /gym/func.php.

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2026-4550	22 Mar 202613:47	–	attackerkb
CNNVD	Code-Projects Simple Gym Management System SQL注入漏洞	22 Mar 202600:00	–	cnnvd
Cvelist	CVE-2026-4550 code-projects Simple Gym Management System func.php sql injection	22 Mar 202613:47	–	cvelist
EUVD	EUVD-2026-14310	22 Mar 202615:31	–	euvd
NVD	CVE-2026-4550	22 Mar 202614:16	–	nvd
Positive Technologies	PT-2026-27012	22 Mar 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-4550	26 Mar 202615:14	–	redhatcve
Vulnrichment	CVE-2026-4550 code-projects Simple Gym Management System func.php sql injection	22 Mar 202613:47	–	vulnrichment

Vulners

Node

code-projects simple_gym_management_systemMatch1.0

[
  {
    "vendor": "code-projects",
    "product": "Simple Gym Management System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
code-projects	www.code-projects.org/
vuldb	www.vuldb.com/
github	www.github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Time-Based%20Blind%20SQL%20Injection%20in%20Simple%20Gym%20Management%20System%20in%20PHP.md
github	www.github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Time-Based%20Blind%20SQL%20Injection%20in%20%20Simple%20Gym%20Management%20System%20in%20PHP%20Product.md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
Trainer_id	query param	/gym/func.php	SQL injection vulnerability in /gym/func.php via Trainer_id and fname parameters	CWE-74, CWE-89
fname	query param	/gym/func.php	SQL injection vulnerability in /gym/func.php via Trainer_id and fname parameters	CWE-74, CWE-89

29 Apr 2026 01:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.14.7

CVSS 45.1

CVSS 25.8

CVSS 34.7

EPSS0.00016

SSVC