Codeastro · Codeastro Gym Management System · CVE-2025-13172
**Name of the Vulnerable Software and Affected Versions**
CodeAstro Gym Management System version 1.0
**Description**
A security flaw exists in CodeAstro Gym Management System version 1.0. The issue involves a SQL injection impacting an unknown function within the `/admin/view-member-report.php` file. Manipulation of the `ID` argument can trigger the injection. This attack can be initiated remotely. The exploit is publicly available.
**Recommendations**
Apply any available updates or patches for CodeAstro Gym Management System version 1.0.
As a temporary workaround, restrict access to the `/admin/view-member-report.php` file.
Sanitize the `ID` argument before using it in any database queries.