Codeastro

Gym Management System

11 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2025-13172

  • EPSS 0.03%
  • Veröffentlicht 14.11.2025 18:15:45
  • Zuletzt bearbeitet 19.11.2025 21:31:56

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated re...

7.2

CVE-2025-12610

Exploit
  • EPSS 0.03%
  • Veröffentlicht 03.11.2025 01:32:06
  • Zuletzt bearbeitet 06.11.2025 16:24:24

A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely....

8.8

CVE-2025-12609

Exploit
  • EPSS 0.04%
  • Veröffentlicht 03.11.2025 01:02:06
  • Zuletzt bearbeitet 05.11.2025 19:14:40

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing manipulation of the argument id/ini_weight results in sql injection. The attack ...

8.8

CVE-2025-12261

Exploit
  • EPSS 0.03%
  • Veröffentlicht 27.10.2025 10:02:14
  • Zuletzt bearbeitet 28.10.2025 02:09:55

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated re...

8.8

CVE-2025-12242

Exploit
  • EPSS 0.03%
  • Veröffentlicht 27.10.2025 07:15:40
  • Zuletzt bearbeitet 28.10.2025 02:16:14

A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendance.php. Such manipulation of the argument ID leads to sql injection. The attack...

8.8

CVE-2025-11593

Exploit
  • EPSS 0.03%
  • Veröffentlicht 11.10.2025 07:02:05
  • Zuletzt bearbeitet 20.10.2025 15:11:58

A flaw has been found in CodeAstro Gym Management System 1.0. This vulnerability affects unknown code of the file /admin/actions/delete-equipment.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. Th...

8.8

CVE-2025-11592

Exploit
  • EPSS 0.03%
  • Veröffentlicht 11.10.2025 06:32:06
  • Zuletzt bearbeitet 20.10.2025 15:14:09

A vulnerability was detected in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/edit-equipmentform.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploi...

8.8

CVE-2025-11591

Exploit
  • EPSS 0.03%
  • Veröffentlicht 11.10.2025 05:15:29
  • Zuletzt bearbeitet 20.10.2025 15:18:17

A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/actions/delete-member.php. The manipulation of the argument ID leads to sql injection. The atta...

8.8

CVE-2025-11590

Exploit
  • EPSS 0.03%
  • Veröffentlicht 11.10.2025 01:02:07
  • Zuletzt bearbeitet 20.10.2025 15:22:29

A weakness has been identified in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/equipment-entry.php. Executing manipulation of the argument ename can lead to sql injection. It is po...

8.8

CVE-2025-11589

Exploit
  • EPSS 0.03%
  • Veröffentlicht 10.10.2025 21:32:09
  • Zuletzt bearbeitet 20.10.2025 15:24:39

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/user-payment.php. Performing manipulation of the argument plan results in sql injection. It is possible to initiate the att...