CVE-2025-4487

creationtimestamp| type| source ---|---|--- 2025-05-09 20:26:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15847 2025-05-09 22:06:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lorbeynhoxd2 2025-05-09...

CVE-2025-4487 itsourcecode Gym Management System ajax.php sql injection

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=deletemember. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2025-4487 itsourcecode Gym Management System ajax.php sql injection

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=deletemember. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2025-4487

CVE-2025-4487 affects itsourcecode Gym Management System 1.0. The vulnerability is an SQL injection in the unknown function handling the endpoint /ajax.php?action=delete_member, triggered by manipulating the ID parameter. It is described as exploitable remotely, with public disclosure of exploits...