145 matches found
CVE-2025-1188
CVE-2025-1188 affects Codezips Gym Management System 1.0. The vulnerability lies in the /dashboard/admin/updateroutine.php file where manipulation of the tid parameter enables SQL injection. Descriptions in multiple connected sources state the attack can be launched remotely and that the exploit ...
CVE-2025-1183
A vulnerability has been found in CodeZips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/more-userprofile.php. The manipulation of the argument loginid leads to sql injection. The attack can be launche...
CVE-2025-1183 CodeZips Gym Management System more-userprofile.php sql injection
A vulnerability has been found in CodeZips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/more-userprofile.php. The manipulation of the argument loginid leads to sql injection. The attack can be launche...
CVE-2025-1183 CodeZips Gym Management System more-userprofile.php sql injection
A vulnerability has been found in CodeZips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/more-userprofile.php. The manipulation of the argument loginid leads to sql injection. The attack can be launche...
CVE-2025-1183
CVE-2025-1183 affects CodeZips Gym Management System 1.0. The vulnerability lies in the parameter login_id in file /dashboard/admin/more-userprofile.php , enabling remote SQL injection via an input that is not properly validated. Reported impact includes high confidentiality, integrity, and avail...
CVE-2025-1188: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /dashboard/admin/updateroutine.php. The manipulation of the argument tid leads to sql injection. The attack may be launched...
CVE-2025-1206: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file /dashboard/admin/viewdetailroutine.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...
PT-2025-6455 · Codezips · Codezips Gym Management System
Name of the Vulnerable Software and Affected Versions: Codezips Gym Management System version 1.0 Description: A critical issue has been found in the Codezips Gym Management System, affecting some unknown functionality of the file /dashboard/admin/updateroutine.php. The manipulation of the tid...
Codezips Gym Management System SQL Injection Vulnerability
Codezips Gym Management System is an open source gym management system from Codezips. A SQL injection vulnerability exists in Codezips Gym Management System version 1.0, which originates from an SQL injection of the tid parameter in the /dashboard/admin/updateroutine.php file...
CVE-2025-1183: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in CodeZips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/more-userprofile.php. The manipulation of the argument loginid leads to sql injection. The attack can be launche...
Codezips Gym Management System injection vulnerability
Codezips Gym Management System is an open source gym management system from Codezips. An injection vulnerability exists in Codezips Gym Management System version 1.0, which originates from an SQL injection vulnerability contained in the id parameter of /dashboard/admin/viewdetailroutine.php...
PT-2025-6848 · Unknown · Codezips Gym Management System
Name of the Vulnerable Software and Affected Versions: Codezips Gym Management System version 1.0 Description: A critical issue has been found in the Codezips Gym Management System, affecting an unknown part of the file /dashboard/admin/viewdetailroutine.php. The manipulation of the id argument...
CVE-2025-0803
A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /dashboard/admin/submitplannew.php. The manipulation of the argument planid leads to sql injection. The attack may be launched...
CVE-2025-0880
A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/updateplan.php. The manipulation of the argument planid leads to sql injection. The attack may be initiated remotely. The exploit has...
CVE-2025-0881
A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/saveroutine.php. The manipulation of the argument rname leads to sql injection. It is possible to launch the attack remotely. The explo...
CVE-2025-0881
A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/saveroutine.php. The manipulation of the argument rname leads to sql injection. It is possible to launch the attack remotely. The explo...
CVE-2025-0881 Codezips Gym Management System saveroutine.php sql injection
A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/saveroutine.php. The manipulation of the argument rname leads to sql injection. It is possible to launch the attack remotely. The explo...
CVE-2025-0881
CVE-2025-0881 affects Codezips Gym Management System 1.0. The vulnerability is an SQL injection in /dashboard/admin/saveroutine.php caused by manipulating the rname parameter. It is exploitable remotely and has been disclosed publicly; multiple sources classify it as critical or high impact. Evid...
CVE-2025-0881 Codezips Gym Management System saveroutine.php sql injection
A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/saveroutine.php. The manipulation of the argument rname leads to sql injection. It is possible to launch the attack remotely. The explo...
CVE-2025-0880 Codezips Gym Management System updateplan.php sql injection
A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/updateplan.php. The manipulation of the argument planid leads to sql injection. The attack may be initiated remotely. The exploit has...