Lucene search
K

1283 matches found

NVD
NVD
added 2025/10/10 10:15 p.m.2 views

CVE-2025-11588

A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

8.8CVSS0.0004EPSS
Exploits1References5
OSV
OSV
added 2025/10/10 10:15 p.m.2 views

CVE-2025-11588

A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

8.8CVSS5.8AI score0.0004EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2025/10/10 9:32 p.m.3 views

CVE-2025-11589

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/user-payment.php. Performing a manipulation of the argument plan results in sql injection. It is possible to initiate the attack remotely. The exploit has been released t...

8.8CVSS5.4AI score0.0004EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/10 9:32 p.m.7 views

CVE-2025-11589 CodeAstro Gym Management System user-payment.php sql injection

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/user-payment.php. Performing a manipulation of the argument plan results in sql injection. It is possible to initiate the attack remotely. The exploit has been released t...

6.5CVSS0.0004EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/10 9:32 p.m.8 views

CVE-2025-11589 CodeAstro Gym Management System user-payment.php sql injection

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/user-payment.php. Performing a manipulation of the argument plan results in sql injection. It is possible to initiate the attack remotely. The exploit has been released t...

6.5CVSS6.4AI score0.0004EPSS
Exploits1References5
CVE
CVE
added 2025/10/10 9:32 p.m.6 views

CVE-2025-11589

CodeAstro Gym Management System 1.0 has a SQL injection in /admin/user-payment.php triggered by manipulating the plan parameter. The vulnerability is exploitable remotely and an exploit has been released publicly. The exact root cause is an insecure handling of the plan argument leading to SQL in...

8.8CVSS6.4AI score0.0004EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2025/10/10 9:32 p.m.5 views

CVE-2025-11588

CodeAstro Gym Management System 1.0 contains a SQL injection in /customer/index.php caused by manipulating the fullname argument. The issue is exploitable remotely, with publicly available exploit material. Multiple connected sources consistently report the same root cause and impact, with CVEs a...

8.8CVSS6.4AI score0.0004EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/10 9:32 p.m.9 views

CVE-2025-11588 CodeAstro Gym Management System index.php sql injection

A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

6.5CVSS6.7AI score0.0004EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/10 9:32 p.m.7 views

CVE-2025-11588 CodeAstro Gym Management System index.php sql injection

A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

6.5CVSS0.0004EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/10/10 12:0 a.m.4 views

PT-2025-41608

Name of the Vulnerable Software and Affected Versions CodeAstro Gym Management System version 1.0 Description A security flaw exists in CodeAstro Gym Management System 1.0. The issue involves a SQL injection impacting an unknown function within the /admin/user-payment.php file. Manipulation of th...

6.5CVSS6.5AI score0.0004EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2025/10/10 12:0 a.m.1 views

PT-2025-41607

Name of the Vulnerable Software and Affected Versions CodeAstro Gym Management System version 1.0 Description A flaw exists in CodeAstro Gym Management System 1.0 that allows for SQL injection. This occurs through manipulation of the fullname argument within the file '/customer/index.php'. The...

6.5CVSS6.4AI score0.0004EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/10/10 12:0 a.m.2 views

CodeAstro Gym Management System SQL注入漏洞

CodeAstro Gym Management System is a gym management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Gym Management System version 1.0, which stems from an incorrect manipulation of the parameter fullname in the file /customer/index.php, which could lead to a SQL injection...

8.8CVSS6.9AI score0.0004EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/10/10 12:0 a.m.2 views

CodeAstro Gym Management System SQL注入漏洞

CodeAstro Gym Management System is a gym management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Gym Management System version 1.0, which stems from an incorrect manipulation of the parameter plan in the file /admin/user-payment.php, which could lead to an SQL injectio...

8.8CVSS6.9AI score0.0004EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/10/08 8:19 p.m.0 views

CVE-2025-11118

A vulnerability was identified in CodeAstro Student Grading System 1.0. This issue affects some unknown processing of the file /adminLogin.php. Such manipulation of the argument staffId leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...

9.8CVSS7AI score0.00046EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-33603

Malicious code in bioql PyPI...

7.2CVSS5AI score0.00083EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-33955

Malicious code in bioql PyPI...

5.4CVSS4.8AI score0.00096EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-48753

Malicious code in bioql PyPI...

6.9CVSS5.6AI score0.00153EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-51318

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00106EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-51207

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00106EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-57980

Malicious code in bioql PyPI...

9.8CVSS7AI score0.00053EPSS
Exploits1References3
Rows per page
Query Builder