CVE-2025-0231

Codezips Gym Management System 1.0 is affected by a SQL injection in /dashboard/admin/submit_payments.php via the m_id parameter. Multiple sources (NVD, Red Hat, CVE listings, CNNVD, VulnDB enrichment, CIRCL sighting) describe a remote exploitation scenario with an impact on confidentiality, inte...

CVE-2025-2847

Codezips Gym Management System 1.0 contains a SQL injection vulnerability in /dashboard/admin/over_month.php caused by unsafe handling of the mm parameter. The issue is exploitable remotely and is publicly disclosed; it allows an attacker with network access to potentially impact confidentiality,...

CVE-2025-1206

CVE-2025-1206 - Codezips Gym Management System 1.0 is affected by an SQL injection in the /dashboard/admin/viewdetailroutine.php file through the id parameter. The vulnerability reportedly enables remote exploitation and has been disclosed publicly. Multiple sources (NVD, Red Hat, CVE feeds) corr...

CVE-2025-1854

CVE-2025-1854 affects Codezips Gym Management System 1.0. The vulnerability is in the file /dashboard/admin/del_member.php where manipulation of the argument name leads to SQL injection. The issue is exploitable remotely and has been disclosed publicly. Connected sources confirm a critical severi...