Approved changes feed: RSS · Atom

cpe:2.3:a:codezips:gym_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorCodezips (d6987edb-dda5-55fa-ba47-db9343ba86ca)
ProductGym Management System (eff23ff2-663d-5bac-858a-484f4611de30)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/codezips/gym-management-system-php purl2cpe 2026-06-01 10:17:56.095604

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2847 vulnerable 2026-06-08 07:16:58.470887 Codezips Gym Management System over_month.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. This issue affects some unknown processing of the file /dashboard/admin/over_month.php. The manipulation of the argument mm leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-27T13:00:19.885Z
Updated: 2025-03-27T13:20:01.951Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-29208 vulnerable 2026-06-08 07:14:56.374789 Details available
CodeZips Gym Management System v1.0 is vulnerable to SQL injection in the name parameter within /dashboard/admin/deleteroutine.php.
Published: 2025-04-01T00:00:00.000Z
Updated: 2025-04-14T17:29:40.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1959 vulnerable 2026-06-08 07:08:38.536047 Codezips Gym Management System change_s_pwd.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, was found in Codezips Gym Management System 1.0. Affected is an unknown function of the file /change_s_pwd.php. The manipulation of the argument login_id/login_key leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-04T22:31:04.431Z
Updated: 2025-04-02T20:49:26.630Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1856 vulnerable 2026-06-08 07:08:38.352692 Codezips Gym Management System gen_invoice.php sql injection
HIGH (7.3)
A vulnerability was found in Codezips Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/gen_invoice.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-03T07:31:06.276Z
Updated: 2025-03-03T14:26:02.394Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1854 vulnerable 2026-06-08 07:08:38.351671 Codezips Gym Management System del_member.php sql injection
MEDIUM (6.3)
A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/del_member.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-03T06:31:04.518Z
Updated: 2025-03-03T15:55:29.875Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1380 vulnerable 2026-06-08 07:08:36.686037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1206 vulnerable 2026-06-08 07:06:37.148968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1188 vulnerable 2026-06-08 07:06:37.117223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1183 vulnerable 2026-06-08 07:06:37.110961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0881 vulnerable 2026-06-08 07:02:25.749869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0880 vulnerable 2026-06-08 07:02:25.749467 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0562 vulnerable 2026-06-08 07:02:24.858058 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0541 vulnerable 2026-06-08 07:02:24.823108 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0535 vulnerable 2026-06-08 07:02:24.806944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0532 vulnerable 2026-06-08 07:02:24.802780 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0231 vulnerable 2026-06-08 07:02:24.001884 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.