CVE-2025-0562: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/healthstatusentry.php. The manipulation of the argument usrid leads to sql injection. The attack may be initiated remotely. The explo...

Codezips Gym Management System injection vulnerability

Codezips Gym Management System is an open source gym management system from Codezips. An injection vulnerability exists in Codezips Gym Management System version 1.0, which stems from the parameter usrid in the file /dashboard/admin/healthstatusentry.php that can lead to SQL injection...

PT-2025-3955 · Codezips · Codezips Gym Management System

Name of the Vulnerable Software and Affected Versions: Codezips Gym Management System version 1.0 Description: A critical issue affects the processing of the file /dashboard/admin/health status entry.php, where the manipulation of the usrid argument leads to SQL injection. The attack can be...

CVE-2023-31702: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database and gain windows XP command shell to perform code execution on database server via GetUserCurrentPwd?UsrId=1...

CVE-2021-40543

Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $GET'usrid' and $GET'profid' in the PasswordCheck.php file...

CVE-2021-40543

Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $GET'usrid' and $GET'profid' in the PasswordCheck.php file...

CVE-2021-40543: Improper Neutralization of Special Elements used in an SQL Command

Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $GET'usrid' and $GET'profid' in the PasswordCheck.php file...

PT-2021-22931

Name of the Vulnerable Software and Affected Versions Opensis-Classic version 8.0 Description The issue is caused by a lack of sanitization of input data at two parameters usrid and prof id in the PasswordCheck.php file, leading to a SQL injection vulnerability. Recommendations For Opensis-Classi...