Vulnerabilidades do Abhishekmali21 Gym Management System
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Abhishekmali21 Gym Management System: 1 registro(s), com versões afetadas e correções.cpe:2.3:a:abhishekmali21:gym_management_system
CVE-2025-67146
Crítica · 9.4
CWE-89 12/01/2026
SQL Injection em Abhishekmali21 Gym Management System
Multiple SQL Injection vulnerabilities exist in AbhishekMali21 GYM-MANAGEMENT-SYSTEM 1.0 via the 'name' parameter in (1) member_search.php, (2) trainer_search.php, and (3) gym_search.php, and via the 'id' parameter in (4) payment_search.php. An unauthenticated remote attacker can exploit these issues to inject malicious SQL commands, leading to unauthorized data extraction, authentication bypass, or modification of database contents.