1 matches found
CVE-2025-67146: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL Injection vulnerabilities exist in AbhishekMali21 GYM-MANAGEMENT-SYSTEM 1.0 via the 'name' parameter in 1 membersearch.php, 2 trainersearch.php, and 3 gymsearch.php, and via the 'id' parameter in 4 paymentsearch.php. An unauthenticated remote attacker can exploit these issues to inje...
9.4CVSS6AI score0.00622EPSS
SaveExploits1References1
20