Approved changes feed: RSS · Atom

cpe:2.3:a:codeastro:gym_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorCodeastro (f92dc1fe-f2d7-58ad-92b0-40a98a9042be)
ProductGym Management System (4e3e2f7e-ab94-5e8c-a87b-b0969afda9fb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-13172 vulnerable 2026-06-08 07:04:31.732521 CodeAstro Gym Management System view-member-report.php sql injection
MEDIUM (6.3)
A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.
Published: 2025-11-14T18:02:06.388Z
Updated: 2026-02-24T06:27:54.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12610 vulnerable 2026-06-08 07:04:30.509714 CodeAstro Gym Management System view-progress-report.php sql injection
MEDIUM (4.7)
A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-11-03T01:32:06.052Z
Updated: 2026-02-24T06:21:34.772Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12609 vulnerable 2026-06-08 07:04:30.509042 CodeAstro Gym Management System update-progress.php sql injection
MEDIUM (4.7)
A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing a manipulation of the argument id/ini_weight results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used.
Published: 2025-11-03T01:02:06.847Z
Updated: 2026-02-24T06:21:22.768Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12261 vulnerable 2026-06-08 07:04:29.947784 CodeAstro Gym Management System remove-announcement.php sql injection
MEDIUM (6.3)
A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.
Published: 2025-10-27T10:02:14.597Z
Updated: 2026-02-24T07:10:25.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12242 vulnerable 2026-06-08 07:04:29.921325 CodeAstro Gym Management System check-attendance.php sql injection
MEDIUM (6.3)
A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendance.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-10-27T07:02:14.435Z
Updated: 2026-02-24T07:09:29.025Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11593 vulnerable 2026-06-08 07:04:28.561964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11592 vulnerable 2026-06-08 07:04:28.561636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11591 vulnerable 2026-06-08 07:04:28.561116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11590 vulnerable 2026-06-08 07:04:28.560667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11589 vulnerable 2026-06-08 07:04:28.560292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11588 vulnerable 2026-06-08 07:04:28.559637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.