Lucene search
K

27 matches found

RedhatCVE
RedhatCVE
added 2025/11/15 6:42 p.m.2 views

CVE-2025-13172

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

8.8CVSS6.4AI score0.00025EPSS
Exploits0References1
OSV
OSV
added 2025/11/14 6:15 p.m.0 views

CVE-2025-13172

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

8.8CVSS5.8AI score
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/11/14 6:2 p.m.1 views

CVE-2025-13172 CodeAstro Gym Management System view-member-report.php sql injection

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

6.5CVSS6.4AI score0.00025EPSS
Exploits0References5
CVE
CVE
added 2025/11/14 6:2 p.m.4 views

CVE-2025-13172

CVE-2025-13172 affects CodeAstro Gym Management System 1.0. A SQL injection vulnerability exists in an unknown function of /admin/view-member-report.php triggered by manipulating the ID parameter. Exploitation is possible remotely, and public exploits have been released. NVD reports a high-severi...

8.8CVSS6.4AI score0.00025EPSS
Exploits0References5Affected Software1
EUVD
EUVD
added 2025/11/14 6:2 p.m.1 views

EUVD-2025-197639

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

6.5CVSS6.5AI score0.00025EPSS
Exploits0References7
Cvelist
Cvelist
added 2025/11/14 6:2 p.m.6 views

CVE-2025-13172 CodeAstro Gym Management System view-member-report.php sql injection

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...

6.5CVSS0.00025EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/11/14 12:0 a.m.1 views

CodeAstro Gym Management System SQL注入漏洞

Gym Management System is a gym management system from SourceCodester. A SQL injection vulnerability exists in version 1.0 of the Gym Management System, which stems from incorrect manipulation of the parameter ID in the file /admin/view-member-report.php, which could lead to a SQL injection attack...

8.8CVSS6.6AI score0.00025EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/11/14 12:0 a.m.2 views

PT-2025-46990

Name of the Vulnerable Software and Affected Versions CodeAstro Gym Management System version 1.0 Description A security flaw exists in CodeAstro Gym Management System version 1.0. The issue involves a SQL injection impacting an unknown function within the /admin/view-member-report.php file...

6.5CVSS7.4AI score0.00025EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2025/10/09 1:27 p.m.1 views

CVE-2025-11475

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /viewmember.php. Executing a manipulation of the argument userid can lead to sql injection. The attack can be launched remotely. The exploit has...

9.8CVSS7.2AI score0.00042EPSS
Exploits1References1
OSV
OSV
added 2025/10/08 1:15 p.m.1 views

CVE-2025-11475

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /viewmember.php. Executing a manipulation of the argument userid can lead to sql injection. The attack can be launched remotely. The exploit has...

9.8CVSS5.8AI score
Exploits0References5
NVD
NVD
added 2025/10/08 1:15 p.m.2 views

CVE-2025-11475

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /viewmember.php. Executing a manipulation of the argument userid can lead to sql injection. The attack can be launched remotely. The exploit has...

9.8CVSS0.00042EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/08 1:2 p.m.2 views

EUVD-2025-33174

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /viewmember.php. Executing manipulation of the argument userid can lead to sql injection. The attack can be launched remotely. The exploit has...

7.5CVSS6.6AI score0.00042EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/08 1:2 p.m.2 views

CVE-2025-11475 projectworlds Advanced Library Management System view_member.php sql injection

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /viewmember.php. Executing a manipulation of the argument userid can lead to sql injection. The attack can be launched remotely. The exploit has...

7.5CVSS7.2AI score0.00042EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2025/10/08 1:2 p.m.2 views

CVE-2025-11475

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /viewmember.php. Executing a manipulation of the argument userid can lead to sql injection. The attack can be launched remotely. The exploit has...

9.8CVSS5.4AI score0.00042EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/08 1:2 p.m.7 views

CVE-2025-11475 projectworlds Advanced Library Management System view_member.php sql injection

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /viewmember.php. Executing a manipulation of the argument userid can lead to sql injection. The attack can be launched remotely. The exploit has...

7.5CVSS0.00042EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/10/08 12:0 a.m.3 views

PT-2025-41252

Name of the Vulnerable Software and Affected Versions projectworlds Advanced Library Management System version 1.0 Description A flaw exists in projectworlds Advanced Library Management System that allows for remote code execution. The issue is related to the manipulation of the user id argument...

9.8CVSS7.8AI score0.00042EPSS
Exploits1References9
OSV
OSV
added 2025/05/06 3:16 p.m.2 views

CVE-2025-4360

A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /viewmember.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The explo...

9.8CVSS5.8AI score
Exploits0References5
CNNVD
CNNVD
added 2025/05/06 12:0 a.m.1 views

itsourcecode Gym Management System 注入漏洞

itsourcecode Gym Management System is an open source gym management system from itsourcecode. An injection vulnerability exists in version 1.0 of itsourcecode Gym Management System, which results from SQL injection due to incorrect manipulation of the parameter ID in the file /viewmember.php...

9.8CVSS7.8AI score0.00204EPSS
Exploits1References6
OSV
OSV
added 2024/04/25 4:56 p.m.0 views

CVE-2024-32467 Meteraphsere vulnerable to unauthorized viewing by workspace members

MeterSphere is an open source continuous testing platform. Prior to version 2.10.14-lts, members without space permissions can view member information from other workspaces beyond their authority. Version 2.10.14-lts fixes this issue...

5.7CVSS6.7AI score0.0007EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2022/05/13 2:15 p.m.1 views

CVE-2022-30376

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/members/viewmember.php?id=...

7.2CVSS7.2AI score0.00274EPSS
Exploits1References2
Rows per page
Query Builder