Codeastro

Gym Management System

11 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2025-13172

  • EPSS 0.25%
  • Veröffentlicht 14.11.2025 18:15:45
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated ...

7.2

CVE-2025-12610

Exploit
  • EPSS 0.33%
  • Veröffentlicht 03.11.2025 01:32:06
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotel...

8.8

CVE-2025-12609

Exploit
  • EPSS 0.3%
  • Veröffentlicht 03.11.2025 01:02:06
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing a manipulation of the argument id/ini_weight results in sql injection. The attac...

8.8

CVE-2025-12261

Exploit
  • EPSS 0.43%
  • Veröffentlicht 27.10.2025 10:02:14
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated ...

8.8

CVE-2025-12242

Exploit
  • EPSS 0.3%
  • Veröffentlicht 27.10.2025 07:15:40
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendance.php. Such manipulation of the argument ID leads to sql injection. The attack...

8.8

CVE-2025-11593

Exploit
  • EPSS 0.3%
  • Veröffentlicht 11.10.2025 07:02:05
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A flaw has been found in CodeAstro Gym Management System 1.0. This vulnerability affects unknown code of the file /admin/actions/delete-equipment.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. Th...

8.8

CVE-2025-11592

Exploit
  • EPSS 0.35%
  • Veröffentlicht 11.10.2025 06:32:06
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A vulnerability was detected in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/edit-equipmentform.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploi...

8.8

CVE-2025-11591

Exploit
  • EPSS 0.3%
  • Veröffentlicht 11.10.2025 05:15:29
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/actions/delete-member.php. The manipulation of the argument ID leads to sql injection. The atta...

8.8

CVE-2025-11590

Exploit
  • EPSS 0.3%
  • Veröffentlicht 11.10.2025 01:02:07
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A weakness has been identified in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/equipment-entry.php. Executing a manipulation of the argument ename can lead to sql injection. It is ...

8.8

CVE-2025-11589

Exploit
  • EPSS 0.35%
  • Veröffentlicht 10.10.2025 21:32:09
  • Zuletzt bearbeitet 29.04.2026 01:00:01

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/user-payment.php. Performing a manipulation of the argument plan results in sql injection. It is possible to initiate the a...