Lucene search
+L

99 matches found

attackerkb
attackerkb
•added 2025/11/03 1:02 a.m.•11 views

CVE-2025-12609

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing a manipulation of the argument id/iniweight results in sql injection. The attack may be initiated remotely. The exploit has bee...

8.8CVSS5.4AI score0.00366EPSS
SaveExploits1References6Affected Software1
EUVD
EUVD
•added 2025/11/03 1:02 a.m.•14 views

EUVD-2025-37465

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing manipulation of the argument id/iniweight results in sql injection. The attack may be initiated remotely. The exploit has been...

5.8CVSS6.6AI score0.00366EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2025/11/03 1:02 a.m.•27 views

CVE-2025-12609 CodeAstro Gym Management System update-progress.php sql injection

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing a manipulation of the argument id/iniweight results in sql injection. The attack may be initiated remotely. The exploit has bee...

5.8CVSS0.00366EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/03 12:00 a.m.•1 views

CVE-2025-12609: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing a manipulation of the argument id/iniweight results in sql injection. The attack may be initiated remotely. The exploit has bee...

8.8CVSS5.5AI score0.00366EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/03 12:00 a.m.•4 views

CVE-2025-12610: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and...

7.2CVSS5.6AI score0.00397EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/11/03 12:00 a.m.•14 views

PT-2025-44744

Name of the Vulnerable Software and Affected Versions CodeAstro Gym Management System version 1.0 Description A flaw exists in CodeAstro Gym Management System 1.0 that could allow for SQL injection. This issue affects the /admin/view-progress-report.php file. Manipulation of the ID argument can...

7.2CVSS7.5AI score0.00397EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/11/03 12:00 a.m.•12 views

CodeAstro Gym Management System SQL注入漏洞

CodeAstro Gym Management System is a gym management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Gym Management System version 1.0, which stems from incorrect manipulation of the parameter id/iniweight in the file /admin/update-progress.php, which could lead to a SQL...

8.8CVSS5.6AI score0.00366EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/03 12:00 a.m.•16 views

PT-2025-44743

Name of the Vulnerable Software and Affected Versions CodeAstro Gym Management System version 1.0 Description A flaw exists in CodeAstro Gym Management System version 1.0 where manipulation of the id/ini weight argument in the file '/admin/update-progress.php' can lead to SQL injection. This issu...

8.8CVSS6.7AI score0.00366EPSS
SaveExploits1References9
RedhatCVE
RedhatCVE
•added 2025/10/28 10:52 a.m.•13 views

CVE-2025-12261

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

8.8CVSS6.4AI score0.00451EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/28 7:59 a.m.•15 views

CVE-2025-12242

A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendance.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS6.5AI score0.00332EPSS
SaveExploits1References1
OSV
OSV
•added 2025/10/27 10:15 a.m.•16 views

CVE-2025-12261

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

8.8CVSS6.5AI score0.00451EPSS
SaveExploits1References5
NVD
NVD
•added 2025/10/27 10:15 a.m.•12 views

CVE-2025-12261

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

8.8CVSS0.00451EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/10/27 10:02 a.m.•31 views

CVE-2025-12261 CodeAstro Gym Management System remove-announcement.php sql injection

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

6.5CVSS0.00451EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/27 10:02 a.m.•35 views

CVE-2025-12261

CodeAstro Gym Management System 1.0 is affected by a SQL injection in /admin/actions/remove-announcement.php caused by manipulation of the ID parameter. The vulnerability can be exploited remotely and the exploit has been made public. Affected product/component: CodeAstro Gym Management System 1....

8.8CVSS6.4AI score0.00451EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/27 10:02 a.m.•8 views

CVE-2025-12261 CodeAstro Gym Management System remove-announcement.php sql injection

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

6.5CVSS6.4AI score0.00451EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2025/10/27 10:02 a.m.•7 views

CVE-2025-12261

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

8.8CVSS6.4AI score0.00451EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2025/10/27 10:02 a.m.•16 views

EUVD-2025-36153

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

6.5CVSS6.5AI score0.00451EPSS
SaveExploits1References6
OSV
OSV
•added 2025/10/27 7:15 a.m.•16 views

CVE-2025-12242

A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendance.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS5.8AI score0.00332EPSS
SaveExploits1References5
NVD
NVD
•added 2025/10/27 7:15 a.m.•20 views

CVE-2025-12242

A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendance.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS0.00332EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/27 7:02 a.m.•34 views

CVE-2025-12242

CVE-2025-12242 affects CodeAstro Gym Management System 1.0. The vulnerability is in an unknown function of the file /admin/actions/check-attendance.php , where manipulating the ID parameter leads to a SQL injection . It can be exploited remotely, and the exploit has been disclosed. The connected ...

8.8CVSS6.4AI score0.00332EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder