CVE-2025-67147

The amansuryawanshi Gym-Management-System-PHP version 1.0 contains multiple SQL Injection vulnerabilities (CWE-89). The flaws are triggered via the name, email, and comment parameters in submit_contact.php, the username and pass_key parameters in secure_login.php, and the login_id, pwfield, and l...