PT-2026-29321 · Code Projects · Simple Gym Management System

Nomath · Published 2026-03-31 · Updated 2026-03-31 · CVE-2026-5206

NVD

CVSS v2.0

6.5

Medium

AV:N/AC:L/Au:S/C:P/I:P/A:P

A security vulnerability has been detected in code-projects Simple Gym Management System 1.0. This vulnerability affects unknown code of the component Payment Handler. The manipulation of the argument Payment id/Amount/customer id/payment type/customer name leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-5206

Affected Products

Simple Gym Management System

References · 6

• 🔥 https://github.com/maidangdang1/CVE/issues/5 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5206 · Security Note
• https://vuldb.com/vuln/354336 · Note
• https://vuldb.com/submit/780406 · Note
• https://code-projects.org · Note
• https://vuldb.com/vuln/354336/cti · Note