PT-2025-3946 · Codezips · Codezips Gym Management System

Nbeisss · Published 2025-01-17 · Updated 2025-01-18 · CVE-2025-0541

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Codezips Gym Management System version 1.0

Description A critical issue affects the processing of the file /dashboard/admin/edit member.php, where the manipulation of the name argument leads to SQL injection. The attack can be initiated remotely.

Recommendations For Codezips Gym Management System version 1.0, consider restricting access to the /dashboard/admin/edit member.php file until a patch is available. As a temporary workaround, avoid using the name argument in the affected file to minimize the risk of exploitation.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-0541

Affected Products

Codezips Gym Management System

References · 9

• 🔥 https://github.com/nbeisss/CVE/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-0541 · Security Note
• https://osv.dev/vulnerability/CVE-2025-0541 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1880450425461068097 · Twitter Post
• https://t.me/cvedetector/15749 · Telegram Post
• https://vuldb.com/?id.292433 · Note
• https://vuldb.com/?submit.480220 · Note
• https://vuldb.com/?ctiid.292433 · Note
• https://twitter.com/CVEnew/status/1880384706899738672 · Twitter Post