Lucene search
+L

601 matches found

Cvelist
Cvelist
added 2025/01/17 5:31 p.m.30 views

CVE-2025-0532 Codezips Gym Management System new_submit.php sql injection

A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/newsubmit.php. The manipulation of the argument mid leads to sql injection. It is possible to launch the attack remotely. The exploit h...

6.5CVSS0.0064EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/01/17 5:31 p.m.11 views

CVE-2025-0532 Codezips Gym Management System new_submit.php sql injection

A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/newsubmit.php. The manipulation of the argument mid leads to sql injection. It is possible to launch the attack remotely. The exploit h...

6.5CVSS7.4AI score0.0064EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/01/17 12:00 a.m.8 views

Codezips Gym Management System 注入漏洞

Codezips Gym Management System is an open source gym management system from Codezips. An injection vulnerability exists in Codezips Gym Management System version 1.0, which stems from the parameter mid in the file /dashboard/admin/newsubmit.php that can lead to SQL injection...

9.8CVSS7.1AI score0.0064EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/01/17 12:00 a.m.17 views

PT-2025-3938 · Unknown · Codezips Gym Management System

Name of the Vulnerable Software and Affected Versions: Codezips Gym Management System version 1.0 Description: A critical issue has been found in the system, allowing for remote SQL injection attacks. The manipulation of the m id argument in the file /dashboard/admin/new submit.php leads to this...

9.8CVSS6.8AI score0.0064EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2025/01/17 12:00 a.m.15 views

PT-2025-3941 · Codezips · Codezips Gym Management System

Name of the Vulnerable Software and Affected Versions: Codezips Gym Management System version 1.0 Description: A critical vulnerability has been found in Codezips Gym Management System. This affects an unknown part of the file /dashboard/admin/edit mem submit.php. The manipulation of the argument...

9.8CVSS6.8AI score0.0055EPSS
SaveExploits1References9
NVD
NVD
added 2025/01/05 10:15 p.m.38 views

CVE-2025-0231

A vulnerability has been found in Codezips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/submitpayments.php. The manipulation of the argument mid leads to sql injection. The attack can be launched...

8.8CVSS0.00484EPSS
SaveExploits1References4
OSV
OSV
added 2025/01/05 10:15 p.m.10 views

CVE-2025-0231

A vulnerability has been found in Codezips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/submitpayments.php. The manipulation of the argument mid leads to sql injection. The attack can be launched...

8.8CVSS5.8AI score0.00484EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/01/05 9:31 p.m.52 views

CVE-2025-0231 Codezips Gym Management System submit_payments.php sql injection

A vulnerability has been found in Codezips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/submitpayments.php. The manipulation of the argument mid leads to sql injection. The attack can be launched...

6.5CVSS0.00484EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/01/05 9:31 p.m.10 views

CVE-2025-0231 Codezips Gym Management System submit_payments.php sql injection

A vulnerability has been found in Codezips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/submitpayments.php. The manipulation of the argument mid leads to sql injection. The attack can be launched...

6.5CVSS7.4AI score0.00484EPSS
SaveExploits1References4
CVE
CVE
added 2025/01/05 9:31 p.m.84 views

CVE-2025-0231

Codezips Gym Management System 1.0 is affected by a SQL injection in /dashboard/admin/submit_payments.php via the m_id parameter. Multiple sources (NVD, Red Hat, CVE listings, CNNVD, VulnDB enrichment, CIRCL sighting) describe a remote exploitation scenario with an impact on confidentiality, inte...

8.8CVSS6.8AI score0.00484EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2024/11/23 8:15 a.m.34 views

CVE-2024-9942

The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the MJgmgtuseravatarimageupload function in all versions up to, and including, 67.1.0. This makes it possible for unauthenticated attackers to upload...

9.8CVSS0.01187EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/23 8:15 a.m.9 views

CVE-2024-9942

The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the MJgmgtuseravatarimageupload function in all versions up to, and including, 67.1.0. This makes it possible for unauthenticated attackers to upload...

9.8CVSS7.9AI score0.01187EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/11/23 12:00 a.m.19 views

PT-2024-39955 · WordPress · Wpgym

Name of the Vulnerable Software and Affected Versions: WPGYM - Wordpress Gym Management System plugin for WordPress versions up to, and including, 67.1.0 Description: The issue is related to arbitrary file uploads due to missing file type validation in the MJ gmgt user avatar image upload functio...

9.8CVSS9.9AI score0.01187EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/11/23 12:00 a.m.14 views

PT-2024-39954 · WordPress · Wpgym

Name of the Vulnerable Software and Affected Versions: WPGYM - Wordpress Gym Management System plugin versions up to, and including, 67.1.0 Description: The issue is related to a missing capability check on the MJ gmgt add staff member function, which allows authenticated attackers with...

8.8CVSS9.2AI score0.00603EPSS
SaveExploits0References8
GithubExploit
GithubExploit
added 2024/09/16 2:05 p.m.110 views

Exploit for CVE-2024-55271

Gym Management System CVE-2024-55271 A GYM management sys...

3.5CVSS5.9AI score0.00129EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2024/09/16 12:00 a.m.320 views

GYM Management System 1.0 Insecure Settings

==================================================================================================================================== | Title : GYM Management System 1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64...

7.4AI score
SaveExploits0
OSV
OSV
added 2024/07/10 11:15 p.m.10 views

CVE-2024-6652

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file managemember.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

8.8CVSS5.7AI score0.00619EPSS
SaveExploits1References4
NVD
NVD
added 2024/07/10 11:15 p.m.32 views

CVE-2024-6652

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file managemember.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

8.8CVSS0.00619EPSS
SaveExploits1References4
CVE
CVE
added 2024/07/10 11:00 p.m.70 views

CVE-2024-6652

CVE-2024-6652 affects itsourcecode Gym Management System 1.0. The vulnerability resides in the file manage_member.php where manipulating the id parameter enables a remote SQL injection . Exploitation has been disclosed publicly and is exploitable over the network with low privileges and no user i...

8.8CVSS7.1AI score0.00619EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/07/10 12:00 a.m.9 views

PT-2024-37779

Name of the Vulnerable Software and Affected Versions itsourcecode Gym Management System version 1.0 Description A critical issue has been found in the itsourcecode Gym Management System, affecting the file manage member.php. The manipulation of the id argument leads to SQL injection. This issue...

8.8CVSS6.4AI score0.00619EPSS
SaveExploits1References11
Rows per page
Query Builder