PT-2026-27012 · Code Projects · Simple Gym Management System

Ahmadmarzook · Published 2026-03-22 · Updated 2026-03-22 · CVE-2026-4550

Mitre

CVSS v3.1

4.7

Medium

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

A vulnerability has been found in code-projects Simple Gym Management System up to 1.0. This affects an unknown part of the file /gym/func.php. Such manipulation of the argument Trainer id/fname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-4550

Affected Products

Simple Gym Management System

References · 8

• 🔥 https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Time-Based%20Blind%20SQL%20Injection%20in%20Simple%20Gym%20Management%20System%20in%20PHP.md · Exploit
• 🔥 https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Time-Based%20Blind%20SQL%20Injection%20in%20%20Simple%20Gym%20Management%20System%20in%20PHP%20Product.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4550 · Security Note
• https://vuldb.com/?submit.774839 · Note
• https://code-projects.org · Note
• https://vuldb.com/?id.352377 · Note
• https://vuldb.com/?ctiid.352377 · Note
• https://vuldb.com/?submit.774838 · Note