CVE-2022-2708

A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument userlogin with the input [email protected]' OR SELECT 9084 FROMSELECT COUNT,CONCAT0x7178767871,SELECT...

CVE-2022-2708

SourceCodester Gym Management System contains a SQL injection in login.php triggered by manipulating the user_login parameter. The vulnerability allows an attacker with local network access to inject SQL (as demonstrated by the payload in the CVE entry), potentially impacting confidentiality, int...