PT-2026-36298 · Code Projects · Gym Management System

Red0 · Published 2026-05-01 · Updated 2026-05-01 · CVE-2026-7553

NVD

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:L/Au:M/C:P/I:P/A:P

A vulnerability was found in code-projects Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit exercises.php. The manipulation of the argument edit exercise results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-7553

Affected Products

Gym Management System

References · 6

• 🔥 https://fox-byte.yuque.com/org-wiki-fox-byte-ig3xms/rdgsp5/yg012bnp1xorwq0p · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7553 · Security Note
• https://code-projects.org · Note
• https://vuldb.com/vuln/360361 · Note
• https://vuldb.com/submit/805603 · Note
• https://vuldb.com/vuln/360361/cti · Note