Lucene search
K

1434 matches found

NVD
NVD
added 2025/11/03 2:15 a.m.4 views

CVE-2025-12609

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing a manipulation of the argument id/iniweight results in sql injection. The attack may be initiated remotely. The exploit has bee...

8.8CVSS0.00301EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/11/03 1:32 a.m.10 views

CVE-2025-12610 CodeAstro Gym Management System view-progress-report.php sql injection

A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and...

5.8CVSS0.00327EPSS
Exploits1References6
CVE
CVE
added 2025/11/03 1:32 a.m.12 views

CVE-2025-12610

CVE-2025-12610 affects CodeAstro Gym Management System 1.0, with a SQL injection in the /admin/view-progress-report.php file. The vulnerability arises from manipulated the ID parameter, potentially enabling remote exploitation. Public disclosures exist for the exploit. Affected component is the v...

7.2CVSS5AI score0.00327EPSS
Exploits1References6Affected Software1
EUVD
EUVD
added 2025/11/03 1:32 a.m.4 views

EUVD-2025-37468

A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and ma...

5.8CVSS6.6AI score0.00327EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/11/03 1:32 a.m.4 views

CVE-2025-12610 CodeAstro Gym Management System view-progress-report.php sql injection

A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and...

5.8CVSS5AI score0.00327EPSS
Exploits1References6
EUVD
EUVD
added 2025/11/03 1:2 a.m.4 views

EUVD-2025-37465

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing manipulation of the argument id/iniweight results in sql injection. The attack may be initiated remotely. The exploit has been...

5.8CVSS6.6AI score0.00301EPSS
Exploits1References7
CVE
CVE
added 2025/11/03 1:2 a.m.7 views

CVE-2025-12609

CVE-2025-12609 affects CodeAstro Gym Management System 1.0. The vulnerability exists in /admin/update-progress.php, where manipulating the id/ini_weight argument enables SQL injection. It is a remote issue with publicly available exploit information across multiple sources, indicating real-world ...

8.8CVSS5AI score0.00301EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2025/11/03 1:2 a.m.10 views

CVE-2025-12609 CodeAstro Gym Management System update-progress.php sql injection

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing a manipulation of the argument id/iniweight results in sql injection. The attack may be initiated remotely. The exploit has bee...

5.8CVSS0.00301EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/11/03 1:2 a.m.2 views

CVE-2025-12609 CodeAstro Gym Management System update-progress.php sql injection

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing a manipulation of the argument id/iniweight results in sql injection. The attack may be initiated remotely. The exploit has bee...

5.8CVSS5AI score0.00301EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/11/03 12:0 a.m.4 views

PT-2025-44743

Name of the Vulnerable Software and Affected Versions CodeAstro Gym Management System version 1.0 Description A flaw exists in CodeAstro Gym Management System version 1.0 where manipulation of the id/ini weight argument in the file '/admin/update-progress.php' can lead to SQL injection. This issu...

8.8CVSS6.7AI score0.00301EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/11/03 12:0 a.m.3 views

CodeAstro Gym Management System SQL注入漏洞

CodeAstro Gym Management System is a gym management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Gym Management System version 1.0, which stems from incorrect manipulation of the parameter id/iniweight in the file /admin/update-progress.php, which could lead to a SQL...

8.8CVSS5.6AI score0.00301EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/11/03 12:0 a.m.4 views

PT-2025-44744

Name of the Vulnerable Software and Affected Versions CodeAstro Gym Management System version 1.0 Description A flaw exists in CodeAstro Gym Management System 1.0 that could allow for SQL injection. This issue affects the /admin/view-progress-report.php file. Manipulation of the ID argument can...

7.2CVSS7.5AI score0.00327EPSS
Exploits1References8
RedhatCVE
RedhatCVE
added 2025/10/28 10:52 a.m.3 views

CVE-2025-12261

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

8.8CVSS6.4AI score0.00397EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/10/28 7:59 a.m.3 views

CVE-2025-12242

A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendance.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS6.5AI score0.00273EPSS
Exploits1References1
OSV
OSV
added 2025/10/27 10:15 a.m.3 views

CVE-2025-12261

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

8.8CVSS6.5AI score0.00397EPSS
Exploits1References5
NVD
NVD
added 2025/10/27 10:15 a.m.3 views

CVE-2025-12261

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

8.8CVSS0.00397EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/27 10:2 a.m.9 views

CVE-2025-12261 CodeAstro Gym Management System remove-announcement.php sql injection

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

6.5CVSS0.00397EPSS
Exploits1References5
CVE
CVE
added 2025/10/27 10:2 a.m.11 views

CVE-2025-12261

CodeAstro Gym Management System 1.0 is affected by a SQL injection in /admin/actions/remove-announcement.php caused by manipulation of the ID parameter. The vulnerability can be exploited remotely and the exploit has been made public. Affected product/component: CodeAstro Gym Management System 1....

8.8CVSS6.4AI score0.00397EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/27 10:2 a.m.2 views

CVE-2025-12261 CodeAstro Gym Management System remove-announcement.php sql injection

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

6.5CVSS6.4AI score0.00397EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/27 10:2 a.m.4 views

EUVD-2025-36153

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

6.5CVSS6.5AI score0.00397EPSS
Exploits1References6
Rows per page
Query Builder