Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Bixintiao

#29937of 53,630
8.8Total CVSS
Vulnerabilities · 1
PT-2025-46990
8.8
2025-11-14
Codeastro · Codeastro Gym Management System · CVE-2025-13172
**Name of the Vulnerable Software and Affected Versions** CodeAstro Gym Management System version 1.0 **Description** A security flaw exists in CodeAstro Gym Management System version 1.0. The issue involves a SQL injection impacting an unknown function within the `/admin/view-member-report.php` file. Manipulation of the `ID` argument can trigger the injection. This attack can be initiated remotely. The exploit is publicly available. **Recommendations** Apply any available updates or patches for CodeAstro Gym Management System version 1.0. As a temporary workaround, restrict access to the `/admin/view-member-report.php` file. Sanitize the `ID` argument before using it in any database queries.