CVE-2025-1959 in Gym Management Systeminfo

Zusammenfassung

von MITRE • 05.03.2025

A vulnerability, which was classified as critical, was found in Codezips Gym Management System 1.0. Affected is an unknown function of the file /change_s_pwd.php. The manipulation of the argument login_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Zuständig

VulDB

Veröffentlichung

05.03.2025

Moderieren

akzeptiert

Eintrag

VDB-298560

CPE

bereit

Exploit

Download

EPSS

0.00607

KEV

nein

Aktivitäten

very low

Quellen

Want to stay up to date on a daily basis?

Enable the mail alert feature now!