4 matches found
CVE-2026-26709
code-projects Simple Gym Management System v1.0 is vulnerable to SQL Injection in /gym/trainersearch.php...
CVE-2026-26709
code-projects Simple Gym Management System v1.0 is vulnerable to SQL Injection in /gym/trainersearch.php...
CVE-2026-26709: Improper Neutralization of Special Elements used in an SQL Command
code-projects Simple Gym Management System v1.0 is vulnerable to SQL Injection in /gym/trainersearch.php...
CVE-2025-67146: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL Injection vulnerabilities exist in AbhishekMali21 GYM-MANAGEMENT-SYSTEM 1.0 via the 'name' parameter in 1 membersearch.php, 2 trainersearch.php, and 3 gymsearch.php, and via the 'id' parameter in 4 paymentsearch.php. An unauthenticated remote attacker can exploit these issues to inje...