3 matches found
CVE-2022-2708
A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument userlogin with the input [email protected]' OR SELECT 9084 FROMSELECT COUNT,CONCAT0x7178767871,SELECT...
Sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument userlogin with the input email protected' OR SELECT 9084 FROMSELECT COUNT,CONCAT0x7178767871,SELECT...
CVE-2022-2708
SourceCodester Gym Management System contains a SQL injection in login.php triggered by manipulating the user_login parameter. The vulnerability allows an attacker with local network access to inject SQL (as demonstrated by the payload in the CVE entry), potentially impacting confidentiality, int...