VulnSea

gym_management_system vulnerabilities

CVEs whose affected-version data names the gym_management_system package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

10 CVEsRSS

CVE-2025-13172Medium· 6.3
11mo ago

A security flaw has been discovered in CodeAstro Gym Management System 1.0

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may …

▾ Sunlitcodeastro · gym_management_systemEPSS 0.31%via NVD
CVE-2025-12242Medium· 6.3
1y ago

A vulnerability has been found in CodeAstro Gym Management System 1.0

A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendance.php. Such manipulation of the argument ID leads to sql injectio…

▾ Sunlitcodeastro · gym_management_systemEPSS 0.33%via NVD
CVE-2025-12261Medium· 6.3
1y ago

A vulnerability was found in CodeAstro Gym Management System 1.0

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can …

▾ Sunlitcodeastro · gym_management_systemEPSS 0.45%via NVD
CVE-2025-11593Medium· 6.3
1y ago

A flaw has been found in CodeAstro Gym Management System 1.0

A flaw has been found in CodeAstro Gym Management System 1.0. This vulnerability affects unknown code of the file /admin/actions/delete-equipment.php. This manipulation of the argument ID causes sql injection. The attack may be initiated…

▾ Sunlitcodeastro · gym_management_systemEPSS 0.34%via NVD
CVE-2025-11592Medium· 6.3
1y ago

A vulnerability was detected in CodeAstro Gym Management System 1.0

A vulnerability was detected in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/edit-equipmentform.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotel…

▾ Sunlitcodeastro · gym_management_systemEPSS 0.38%via NVD
CVE-2025-11591Medium· 6.3
1y ago

A security vulnerability has been detected in CodeAstro Gym Management System 1.0

A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/actions/delete-member.php. The manipulation of the argument ID leads to sql inject…

▾ Sunlitcodeastro · gym_management_systemEPSS 0.34%via NVD
CVE-2025-11590Medium· 6.3
1y ago

A weakness has been identified in CodeAstro Gym Management System 1.0

A weakness has been identified in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/equipment-entry.php. Executing a manipulation of the argument ename can lead to sql inje…

▾ Sunlitcodeastro · gym_management_systemEPSS 0.34%via NVD
CVE-2025-11589Medium· 6.3
1y ago

A security flaw has been discovered in CodeAstro Gym Management System 1.0

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/user-payment.php. Performing a manipulation of the argument plan results in sql injection. It is possible to i…

▾ Sunlitcodeastro · gym_management_systemEPSS 0.38%via NVD
CVE-2025-11588Medium· 6.3
1y ago

A vulnerability was identified in CodeAstro Gym Management System 1.0

A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from …

▾ Sunlitcodeastro · gym_management_systemEPSS 0.34%via NVD
CVE-2025-10851High· 7.3
1y ago

A security flaw has been discovered in Campcodes Gym Management System 1.0

A security flaw has been discovered in Campcodes Gym Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to …

▾ Twilightcampcodes · gym_management_systemEPSS 0.48%via NVD
gym_management_system vulnerabilities (CVEs) · VulnSea