Lucene search
+L

1885 matches found

Cvelist
Cvelist
•added 2025/11/03 1:02 a.m.•41 views

CVE-2025-12609 CodeAstro Gym Management System update-progress.php sql injection

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing a manipulation of the argument id/iniweight results in sql injection. The attack may be initiated remotely. The exploit has bee...

5.8CVSS0.00366EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/11/03 1:02 a.m.•20 views

EUVD-2025-37465

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing manipulation of the argument id/iniweight results in sql injection. The attack may be initiated remotely. The exploit has been...

5.8CVSS5.2AI score0.00366EPSS
SaveExploits1References7
attackerkb
attackerkb
•added 2025/11/03 1:02 a.m.•17 views

CVE-2025-12609

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing a manipulation of the argument id/iniweight results in sql injection. The attack may be initiated remotely. The exploit has bee...

8.8CVSS5.2AI score0.00366EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/03 1:02 a.m.•9 views

CVE-2025-12609 CodeAstro Gym Management System update-progress.php sql injection

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing a manipulation of the argument id/iniweight results in sql injection. The attack may be initiated remotely. The exploit has bee...

5.8CVSS5.2AI score0.00366EPSS
SaveExploits1References6
CVE
CVE
•added 2025/11/03 1:02 a.m.•35 views

CVE-2025-12609

CVE-2025-12609 affects CodeAstro Gym Management System 1.0. The vulnerability exists in /admin/update-progress.php, where manipulating the id/ini_weight argument enables SQL injection. It is a remote issue with publicly available exploit information across multiple sources, indicating real-world ...

8.8CVSS5.2AI score0.00366EPSS
SaveExploits1References6Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/03 12:00 a.m.•19 views

PT-2025-44744

Name of the Vulnerable Software and Affected Versions CodeAstro Gym Management System version 1.0 Description A flaw exists in CodeAstro Gym Management System 1.0 that could allow for SQL injection. This issue affects the /admin/view-progress-report.php file. Manipulation of the ID argument can...

7.2CVSS5.3AI score0.00397EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2025/11/03 12:00 a.m.•23 views

PT-2025-44743

Name of the Vulnerable Software and Affected Versions CodeAstro Gym Management System version 1.0 Description A flaw exists in CodeAstro Gym Management System version 1.0 where manipulation of the id/ini weight argument in the file '/admin/update-progress.php' can lead to SQL injection. This issu...

8.8CVSS5.3AI score0.00366EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/03 12:00 a.m.•9 views

CVE-2025-12609: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing a manipulation of the argument id/iniweight results in sql injection. The attack may be initiated remotely. The exploit has bee...

8.8CVSS5.2AI score0.00366EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/03 12:00 a.m.•11 views

CVE-2025-12610: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and...

7.2CVSS5.3AI score0.00397EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/11/03 12:00 a.m.•18 views

CodeAstro Gym Management System SQL Injection Vulnerability

CodeAstro Gym Management System is a gym management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Gym Management System version 1.0, which stems from incorrect manipulation of the parameter id/iniweight in the file /admin/update-progress.php, which could lead to a SQL...

8.8CVSS5.3AI score0.00366EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/10/28 10:52 a.m.•16 views

CVE-2025-12261

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

8.8CVSS6.5AI score0.00451EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/28 7:59 a.m.•16 views

CVE-2025-12242

A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendance.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS6.4AI score0.00332EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/10/27 10:15 a.m.•20 views

CVE-2025-12261

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

8.8CVSS6.4AI score0.00451EPSS
SaveExploits1References5
NVD
NVD
•added 2025/10/27 10:15 a.m.•16 views

CVE-2025-12261

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

8.8CVSS0.00451EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/10/27 10:02 a.m.•8 views

CVE-2025-12261 CodeAstro Gym Management System remove-announcement.php sql injection

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

6.5CVSS6.4AI score0.00451EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/27 10:02 a.m.•44 views

CVE-2025-12261

CodeAstro Gym Management System 1.0 is affected by a SQL injection in /admin/actions/remove-announcement.php caused by manipulation of the ID parameter. The vulnerability can be exploited remotely and the exploit has been made public. Affected product/component: CodeAstro Gym Management System 1....

8.8CVSS6.4AI score0.00451EPSS
SaveExploits1References5Affected Software1
attackerkb
attackerkb
•added 2025/10/27 10:02 a.m.•9 views

CVE-2025-12261

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

8.8CVSS6.5AI score0.00451EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2025/10/27 10:02 a.m.•19 views

EUVD-2025-36153

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

6.5CVSS6.5AI score0.00451EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/10/27 10:02 a.m.•34 views

CVE-2025-12261 CodeAstro Gym Management System remove-announcement.php sql injection

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and...

6.5CVSS0.00451EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/10/27 7:15 a.m.•19 views

CVE-2025-12242

A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendance.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS6.4AI score0.00332EPSS
SaveExploits1References5
Rows per page
Query Builder