EUVD-2025-2062

Malicious code in bioql PyPI...

EUVD-2025-14822

Malicious code in bioql PyPI...

EUVD-2025-1910

Malicious code in bioql PyPI...

CVE-2025-0532

A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/newsubmit.php. The manipulation of the argument mid leads to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2025-0535

A vulnerability classified as critical has been found in Codezips Gym Management System 1.0. This affects an unknown part of the file /dashboard/admin/editmemsubmit.php. The manipulation of the argument uid leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

CVE-2025-0541

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/editmember.php. The manipulation of the argument name leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-0880

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/updateplan.php. The manipulation of the argument planid leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-0881

A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/saveroutine.php. The manipulation of the argument rname leads to sql injection. It is possible to launch the attack remotely. The explo...

CVE-2025-0562

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/healthstatusentry.php. The manipulation of the argument usrid leads to sql injection. The attack may be initiated remotely. The explo...

CVE-2025-0231

A vulnerability has been found in Codezips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/submitpayments.php. The manipulation of the argument mid leads to sql injection. The attack can be launched...

CVE-2025-29208

CodeZips Gym Management System v1.0 is vulnerable to SQL injection in the name parameter within /dashboard/admin/deleteroutine.php...

CVE-2025-29208

CodeZips Gym Management System v1.0 is vulnerable to SQL injection in the name parameter within /dashboard/admin/deleteroutine.php...

CVE-2025-29208

CodeZips Gym Management System v1.0 is vulnerable to SQL injection in the name parameter within /dashboard/admin/deleteroutine.php...

PT-2025-14374 · Codezips · Codezips Gym Management System

Name of the Vulnerable Software and Affected Versions: CodeZips Gym Management System version 1.0 Description: The issue concerns SQL injection in the name parameter within the "/dashboard/admin/deleteroutine.php" API endpoint. This allows for potential exploitation. Recommendations: For CodeZips...

CVE-2025-29208

CodeZips Gym Management System v1.0 is vulnerable to SQL injection in the name parameter within /dashboard/admin/deleteroutine.php...

CVE-2025-29208

CodeZips Gym Management System v1.0 is affected by an SQL injection in the name parameter of /dashboard/admin/deleteroutine.php. The CVE records a medium-severity issue (CVSS 6.5, Confidentiality/Integrity impact L, Availability impact N) with network attack vector, low complexity, no privileges,...

CVE-2025-2847

A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. This issue affects some unknown processing of the file /dashboard/admin/overmonth.php. The manipulation of the argument mm leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-2847

A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. This issue affects some unknown processing of the file /dashboard/admin/overmonth.php. The manipulation of the argument mm leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-2847

A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. This issue affects some unknown processing of the file /dashboard/admin/overmonth.php. The manipulation of the argument mm leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-2847

Codezips Gym Management System 1.0 contains a SQL injection vulnerability in /dashboard/admin/over_month.php caused by unsafe handling of the mm parameter. The issue is exploitable remotely and is publicly disclosed; it allows an attacker with network access to potentially impact confidentiality,...