CVE-2025-3151

CVE-2025-3151 affects SourceCodester Gym Management System v1.0. The vulnerability is in the signup.php endpoint, where manipulation of the user_name argument enables SQL injection. It can be exploited remotely and has been disclosed publicly. Multiple sources describe it as critical/high impact,...

CVE-2025-6476

CVE-2025-6476 affects SourceCodester Gym Management System 1.0 and is a cross-site request forgery (CSRF) vulnerability. The public disclosure indicates remote exploitation via an affected function, with no specific patch version provided in the sources. Several connected documents corroborate th...