Approved changes feed: RSS · Atom

cpe:2.3:a:abhishekmali21:gym_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorAbhishekmali21 (2127a0e5-e756-5676-8883-81da34d313ed)
ProductGym Management System (f0579b32-7622-5185-a288-137683eab64a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/abhishekmali21/gym-management-system purl2cpe 2026-06-01 10:16:47.112994

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-67146 vulnerable 2026-06-03 15:11:01.411185 Details available
Multiple SQL Injection vulnerabilities exist in AbhishekMali21 GYM-MANAGEMENT-SYSTEM 1.0 via the 'name' parameter in (1) member_search.php, (2) trainer_search.php, and (3) gym_search.php, and via the 'id' parameter in (4) payment_search.php. An unauthenticated remote attacker can exploit these issues to inject malicious SQL commands, leading to unauthorized data extraction, authentication bypass, or modification of database contents.
Published: 2026-01-12T00:00:00.000Z
Updated: 2026-01-12T21:25:47.231Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.