CVE-2025-60311

ProjectWorlds Gym Management System version 1.0 is vulnerable to SQL Injection due to incorrect manipulation of the id parameter in the profile/edit.php page. This flaw allows attackers to perform unauthorized access or modification of data via the affected API endpoint. Remediation requires appl...