CVE Intelligence

Vulnerabilidades do Abhishekmali21 Gym Management System

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Abhishekmali21 Gym Management System: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:abhishekmali21:gym_management_system

CVE-2025-67146 Crítica · 9.4 CWE-89 12/01/2026
SQL Injection em Abhishekmali21 Gym Management System
Multiple SQL Injection vulnerabilities exist in AbhishekMali21 GYM-MANAGEMENT-SYSTEM 1.0 via the 'name' parameter in (1) member_search.php, (2) trainer_search.php, and (3) gym_search.php, and via the 'id' parameter in (4) payment_search.php. An unauthenticated remote attacker can exploit these issues to inject malicious SQL commands, leading to unauthorized data extraction, authentication bypass, or modification of database contents.