CVE-2025-4363

creationtimestamp| type| source ---|---|--- 2025-05-06 16:21:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15146 2025-05-06 18:21:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojis7gvfm2h 2025-05-06 20:20:25+00:00| exploited|...

CVE-2025-4363

CVE-2025-4363 affects itsourcecode Gym Management System 1.0. The vulnerability is an SQL injection in the endpoint /ajax.php?action=end_membership (parameter rid). Reports consistently indicate a remote attack vector with potential high-severity impact (confidentiality, integrity, and availabili...

CVE-2025-4363 itsourcecode Gym Management System ajax.php sql injection

A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=endmembership. The manipulation of the argument rid leads to sql injection. The attack may be initiated remotely. Th...