CVE-2022-2749: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mygym/admin/index.php?viewexercises. The manipulation leads to unrestricted upload. The attack can be launched remotely. The...

CVE-2022-2728: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Gym Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file /mygym/admin/index.php. The manipulation of the argument edittran leads to sql injection. The attack may be launched remotely. The...