Lucene search
+L

44 matches found

EUVD
EUVD
added 2025/10/11 6:30 a.m.10 views

EUVD-2025-33813

A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/actions/delete-member.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has...

6.5CVSS6.6AI score0.00335EPSS
SaveExploits1References6
OSV
OSV
added 2025/10/11 5:15 a.m.9 views

CVE-2025-11591

A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/actions/delete-member.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has...

8.8CVSS5.8AI score0.00335EPSS
SaveExploits1References5
NVD
NVD
added 2025/10/11 5:15 a.m.15 views

CVE-2025-11591

A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/actions/delete-member.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has...

8.8CVSS0.00335EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/10/11 5:02 a.m.27 views

CVE-2025-11591 CodeAstro Gym Management System delete-member.php sql injection

A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/actions/delete-member.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has...

6.5CVSS0.00335EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/10/11 5:02 a.m.5 views

CVE-2025-11591 CodeAstro Gym Management System delete-member.php sql injection

A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/actions/delete-member.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has...

6.5CVSS6.8AI score0.00335EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/11 5:02 a.m.26 views

CVE-2025-11591

CodeAstro Gym Management System 1.0 is affected by a SQL injection in /admin/actions/delete-member.php caused by manipulation of the ID parameter. Multiple sources (NVD, Red Hat, CVE lists) confirm remote exploitability and public disclosure. The vulnerability arises in the delete-member function...

8.8CVSS6.8AI score0.00335EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2025/10/11 12:00 a.m.13 views

CodeAstro Gym Management System SQL注入漏洞

CodeAstro Gym Management System is a gym management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Gym Management System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /admin/actions/delete-member.php, which could lead to a SQL...

8.8CVSS6.9AI score0.00335EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/10/11 12:00 a.m.29 views

PT-2025-41638

Name of the Vulnerable Software and Affected Versions CodeAstro Gym Management System version 1.0 Description A security issue exists in CodeAstro Gym Management System 1.0. The issue involves the manipulation of the ID argument in the file /admin/actions/delete-member.php, leading to a SQL...

6.5CVSS6.2AI score0.00335EPSS
SaveExploits1References10
OSV
OSV
added 2025/07/27 3:15 p.m.8 views

CVE-2025-8234

A vulnerability was found in code-projects Online Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/deletemember.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit...

9.8CVSS5.8AI score0.00491EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/07/27 12:00 a.m.11 views

Code-Projects Online Ordering System 注入漏洞

Code-Projects Online Ordering System is a Code-Projects open source online ordering system. An injection vulnerability exists in Code-Projects Online Ordering System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file...

9.8CVSS7.7AI score0.00491EPSS
SaveExploits1References6
OSV
OSV
added 2025/05/09 8:15 p.m.11 views

CVE-2025-4487

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=deletemember. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit...

9.8CVSS5.8AI score0.00535EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/05/09 12:00 a.m.10 views

itsourcecode Gym Management System 注入漏洞

itsourcecode Gym Management System is an open source gym management system by itsourcecode. An injection vulnerability exists in itsourcecode Gym Management System version 1.0, which originates from an SQL injection caused by a parameter ID operation in the file /ajax.php?action=deletemember...

9.8CVSS7.8AI score0.00535EPSS
SaveExploits1References6
OSV
OSV
added 2025/05/06 2:15 p.m.13 views

CVE-2025-4359

A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletemember. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The...

9.8CVSS5.8AI score0.00514EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.10 views

Codezips Gym Management System 注入漏洞

Codezips Gym Management System is an open source gym management system from Codezips. An injection vulnerability exists in Codezips Gym Management System version 1.0, which stems from a SQL injection in the delmember.php file and could lead to a remote attack...

8.8CVSS7AI score0.00507EPSS
SaveExploits1References5
OSV
OSV
added 2024/08/12 1:38 p.m.8 views

CVE-2024-40488

A Cross-Site Request Forgery CSRF vulnerability was found in the Kashipara Live Membership System v1.0. This could lead to an attacker tricking the administrator into deleting valid member data via a crafted HTML page, as demonstrated by a Delete Member action at the /deletemembers.php...

8.8CVSS5.8AI score0.00334EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/08/08 12:00 a.m.29 views

CVE-2024-40488

A Cross-Site Request Forgery CSRF vulnerability was found in the Kashipara Live Membership System v1.0. This could lead to an attacker tricking the administrator into deleting valid member data via a crafted HTML page, as demonstrated by a Delete Member action at the /deletemembers.php...

0.00334EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/08/08 12:00 a.m.21 views

CVE-2024-40488

A Cross-Site Request Forgery CSRF vulnerability was found in the Kashipara Live Membership System v1.0. This could lead to an attacker tricking the administrator into deleting valid member data via a crafted HTML page, as demonstrated by a Delete Member action at the /deletemembers.php...

6.7AI score0.00334EPSS
SaveExploits1References2
OSV
OSV
added 2023/09/09 8:15 a.m.9 views

CVE-2023-4846

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file deletemember.php. The manipulation of the argument memid leads to sql injection. The attack may be initiated remotely. The exploit has be...

7.5CVSS5.7AI score0.00611EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/09/09 12:00 a.m.14 views

PT-2023-30855 · Sourcecodester · Sourcecodester Simple Membership System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Membership System version 1.0 Description: A critical issue affects the processing of the file delete member.php. The manipulation of the mem id argument leads to sql injection. The attack may be initiated remotely. The...

7.5CVSS7.8AI score0.00611EPSS
SaveExploits1References9
OSV
OSV
added 2022/04/21 8:15 p.m.16 views

CVE-2022-28414

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=deletemember...

9.8CVSS7.3AI score0.01239EPSS
SaveExploits1References1
Rows per page
Query Builder