Approved changes feed: RSS · Atom

cpe:2.3:a:codezips:gym_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodezips (d6987edb-dda5-55fa-ba47-db9343ba86ca)
ProductGym Management System (eff23ff2-663d-5bac-858a-484f4611de30)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/codezips/gym-management-system-php purl2cpe 2026-06-01 10:17:56.095606

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2847 vulnerable 2026-06-08 07:16:58.470021 Codezips Gym Management System over_month.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. This issue affects some unknown processing of the file /dashboard/admin/over_month.php. The manipulation of the argument mm leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-27T13:00:19.885Z
Updated: 2025-03-27T13:20:01.951Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1959 vulnerable 2026-06-08 07:08:38.535883 Codezips Gym Management System change_s_pwd.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, was found in Codezips Gym Management System 1.0. Affected is an unknown function of the file /change_s_pwd.php. The manipulation of the argument login_id/login_key leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-04T22:31:04.431Z
Updated: 2025-04-02T20:49:26.630Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1856 vulnerable 2026-06-08 07:08:38.352575 Codezips Gym Management System gen_invoice.php sql injection
HIGH (7.3)
A vulnerability was found in Codezips Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/gen_invoice.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-03T07:31:06.276Z
Updated: 2025-03-03T14:26:02.394Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1854 vulnerable 2026-06-08 07:08:38.351525 Codezips Gym Management System del_member.php sql injection
MEDIUM (6.3)
A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/del_member.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-03T06:31:04.518Z
Updated: 2025-03-03T15:55:29.875Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1380 vulnerable 2026-06-08 07:08:36.684874 Codezips Gym Management System del_plan.php sql injection
MEDIUM (6.3)
A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/del_plan.php. The manipulation of the argument name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-02-17T07:00:15.364Z
Updated: 2025-02-18T19:32:08.675Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1206 vulnerable 2026-06-08 07:06:37.148918 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1188 vulnerable 2026-06-08 07:06:37.117179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1183 vulnerable 2026-06-08 07:06:37.110255 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0881 vulnerable 2026-06-08 07:02:25.749829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0880 vulnerable 2026-06-08 07:02:25.749425 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0803 vulnerable 2026-06-08 07:02:25.568812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0562 vulnerable 2026-06-08 07:02:24.850677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0541 vulnerable 2026-06-08 07:02:24.823067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0535 vulnerable 2026-06-08 07:02:24.806825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0532 vulnerable 2026-06-08 07:02:24.802734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0231 vulnerable 2026-06-08 07:02:23.999097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.