8 matches found
PT-2025-3955 · Codezips · Codezips Gym Management System
Name of the Vulnerable Software and Affected Versions: Codezips Gym Management System version 1.0 Description: A critical issue affects the processing of the file /dashboard/admin/health status entry.php, where the manipulation of the usrid argument leads to SQL injection. The attack can be...
Codezips Gym Management System 注入漏洞
Codezips Gym Management System is an open source gym management system from Codezips. An injection vulnerability exists in Codezips Gym Management System version 1.0, which stems from the parameter usrid in the file /dashboard/admin/healthstatusentry.php that can lead to SQL injection...
CVE-2025-0562: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/healthstatusentry.php. The manipulation of the argument usrid leads to sql injection. The attack may be initiated remotely. The explo...
CVE-2023-31702: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database and gain windows XP command shell to perform code execution on database server via GetUserCurrentPwd?UsrId=1...
CVE-2021-40543
Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $GET'usrid' and $GET'profid' in the PasswordCheck.php file...
CVE-2021-40543
Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $GET'usrid' and $GET'profid' in the PasswordCheck.php file...
PT-2021-22931
Name of the Vulnerable Software and Affected Versions Opensis-Classic version 8.0 Description The issue is caused by a lack of sanitization of input data at two parameters usrid and prof id in the PasswordCheck.php file, leading to a SQL injection vulnerability. Recommendations For Opensis-Classi...
CVE-2021-40543: Improper Neutralization of Special Elements used in an SQL Command
Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $GET'usrid' and $GET'profid' in the PasswordCheck.php file...