601 matches found
CVE-2025-0532 Codezips Gym Management System new_submit.php sql injection
A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/newsubmit.php. The manipulation of the argument mid leads to sql injection. It is possible to launch the attack remotely. The exploit h...
CVE-2025-0532 Codezips Gym Management System new_submit.php sql injection
A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/newsubmit.php. The manipulation of the argument mid leads to sql injection. It is possible to launch the attack remotely. The exploit h...
Codezips Gym Management System 注入漏洞
Codezips Gym Management System is an open source gym management system from Codezips. An injection vulnerability exists in Codezips Gym Management System version 1.0, which stems from the parameter mid in the file /dashboard/admin/newsubmit.php that can lead to SQL injection...
PT-2025-3938 · Unknown · Codezips Gym Management System
Name of the Vulnerable Software and Affected Versions: Codezips Gym Management System version 1.0 Description: A critical issue has been found in the system, allowing for remote SQL injection attacks. The manipulation of the m id argument in the file /dashboard/admin/new submit.php leads to this...
PT-2025-3941 · Codezips · Codezips Gym Management System
Name of the Vulnerable Software and Affected Versions: Codezips Gym Management System version 1.0 Description: A critical vulnerability has been found in Codezips Gym Management System. This affects an unknown part of the file /dashboard/admin/edit mem submit.php. The manipulation of the argument...
CVE-2025-0231
A vulnerability has been found in Codezips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/submitpayments.php. The manipulation of the argument mid leads to sql injection. The attack can be launched...
CVE-2025-0231
A vulnerability has been found in Codezips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/submitpayments.php. The manipulation of the argument mid leads to sql injection. The attack can be launched...
CVE-2025-0231 Codezips Gym Management System submit_payments.php sql injection
A vulnerability has been found in Codezips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/submitpayments.php. The manipulation of the argument mid leads to sql injection. The attack can be launched...
CVE-2025-0231 Codezips Gym Management System submit_payments.php sql injection
A vulnerability has been found in Codezips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/submitpayments.php. The manipulation of the argument mid leads to sql injection. The attack can be launched...
CVE-2025-0231
Codezips Gym Management System 1.0 is affected by a SQL injection in /dashboard/admin/submit_payments.php via the m_id parameter. Multiple sources (NVD, Red Hat, CVE listings, CNNVD, VulnDB enrichment, CIRCL sighting) describe a remote exploitation scenario with an impact on confidentiality, inte...
CVE-2024-9942
The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the MJgmgtuseravatarimageupload function in all versions up to, and including, 67.1.0. This makes it possible for unauthenticated attackers to upload...
CVE-2024-9942
The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the MJgmgtuseravatarimageupload function in all versions up to, and including, 67.1.0. This makes it possible for unauthenticated attackers to upload...
PT-2024-39955 · WordPress · Wpgym
Name of the Vulnerable Software and Affected Versions: WPGYM - Wordpress Gym Management System plugin for WordPress versions up to, and including, 67.1.0 Description: The issue is related to arbitrary file uploads due to missing file type validation in the MJ gmgt user avatar image upload functio...
PT-2024-39954 · WordPress · Wpgym
Name of the Vulnerable Software and Affected Versions: WPGYM - Wordpress Gym Management System plugin versions up to, and including, 67.1.0 Description: The issue is related to a missing capability check on the MJ gmgt add staff member function, which allows authenticated attackers with...
Exploit for CVE-2024-55271
Gym Management System CVE-2024-55271 A GYM management sys...
GYM Management System 1.0 Insecure Settings
==================================================================================================================================== | Title : GYM Management System 1.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64...
CVE-2024-6652
A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file managemember.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2024-6652
A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file managemember.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2024-6652
CVE-2024-6652 affects itsourcecode Gym Management System 1.0. The vulnerability resides in the file manage_member.php where manipulating the id parameter enables a remote SQL injection . Exploitation has been disclosed publicly and is exploitable over the network with low privileges and no user i...
PT-2024-37779
Name of the Vulnerable Software and Affected Versions itsourcecode Gym Management System version 1.0 Description A critical issue has been found in the itsourcecode Gym Management System, affecting the file manage member.php. The manipulation of the id argument leads to SQL injection. This issue...