GCVE - cpe:2.3:a:codeastro:gym_management_system:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:codeastro:gym_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Codeastro (`f92dc1fe-f2d7-58ad-92b0-40a98a9042be`)
Product	Gym Management System (`4e3e2f7e-ab94-5e8c-a87b-b0969afda9fb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-13172`	vulnerable	2026-06-08 07:04:31.732480	CodeAstro Gym Management System view-member-report.php sql injection MEDIUM (6.3) A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. Published: 2025-11-14T18:02:06.388Z Updated: 2026-02-24T06:27:54.665Z Open on db.gcve.eu Reference links https://vuldb.com/?id.332464 https://vuldb.com/?ctiid.332464 https://vuldb.com/?submit.684785 https://github.com/Bixintiao/cve/issues/1 https://codeastro.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-12610`	vulnerable	2026-06-08 07:04:30.509638	CodeAstro Gym Management System view-progress-report.php sql injection MEDIUM (4.7) A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. Published: 2025-11-03T01:32:06.052Z Updated: 2026-02-24T06:21:34.772Z Open on db.gcve.eu Reference links https://vuldb.com/?id.330905 https://vuldb.com/?ctiid.330905 https://vuldb.com/?submit.678450 https://vuldb.com/?submit.683064 https://github.com/danz0424/loudong/issues/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-12609`	vulnerable	2026-06-08 07:04:30.508966	CodeAstro Gym Management System update-progress.php sql injection MEDIUM (4.7) A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing a manipulation of the argument id/ini_weight results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used. Published: 2025-11-03T01:02:06.847Z Updated: 2026-02-24T06:21:22.768Z Open on db.gcve.eu Reference links https://vuldb.com/?id.330904 https://vuldb.com/?ctiid.330904 https://vuldb.com/?submit.678402 https://vuldb.com/?submit.678403 https://github.com/iamzzzzz/iam/issues/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-12261`	vulnerable	2026-06-08 07:04:29.947753	CodeAstro Gym Management System remove-announcement.php sql injection MEDIUM (6.3) A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used. Published: 2025-10-27T10:02:14.597Z Updated: 2026-02-24T07:10:25.573Z Open on db.gcve.eu Reference links https://vuldb.com/?id.329932 https://vuldb.com/?ctiid.329932 https://vuldb.com/?submit.674022 https://github.com/JeromClown/cve/issues/1 https://codeastro.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-12242`	vulnerable	2026-06-08 07:04:29.921292	CodeAstro Gym Management System check-attendance.php sql injection MEDIUM (6.3) A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendance.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-10-27T07:02:14.435Z Updated: 2026-02-24T07:09:29.025Z Open on db.gcve.eu Reference links https://vuldb.com/?id.329913 https://vuldb.com/?ctiid.329913 https://vuldb.com/?submit.673411 https://github.com/yihaofuweng/cve/issues/54 https://codeastro.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11593`	vulnerable	2026-06-08 07:04:28.561935	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11592`	vulnerable	2026-06-08 07:04:28.561508	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11591`	vulnerable	2026-06-08 07:04:28.561084	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11590`	vulnerable	2026-06-08 07:04:28.560632	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11589`	vulnerable	2026-06-08 07:04:28.560146	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11588`	vulnerable	2026-06-08 07:04:28.558763	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.