Description
A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/saveroutine.php. The manipulation of the argument rname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Codezips | Gym Management System | 1.0 |
References
- https://github.com/wizdzz/CVE/issues/1Broken Link
- https://vuldb.com/?ctiid.294126Permissions Required, VDB Entry
- https://vuldb.com/?id.294126Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.489192Third Party Advisory, VDB Entry
- https://github.com/wizdzz/CVE/issues/1Broken Link
Timeline
- Published
- Jan 30, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed