CVE-2022-2703: A vulnerability was found in SourceCodester Gym Management System
CVE-2022-2703 is a medium-severity flaw (CVSS 6.3) affecting gym management system. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A vulnerability was found in SourceCodester Gym Management System. It has been classified as critical. This affects an unknown part of the component Exercises Module. The manipulation of the argument exer leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205827.
Why this priority
- Public exploit reference
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 6.3 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.8% (top 44%) |
| CISA exploited list | No |
| Weakness | CWE-89 |
| Published | 2022-08-08 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-2703?
gym management system: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2022-2703 being exploited?
CVE-2022-2703 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-2703 affect?
CVE-2022-2703 affects gym management system. Severity is medium (CVSS 6.3). A vulnerability was found in SourceCodester Gym Management System. It has been classified as critical. This affects an unknown part of the component Exercises Module. The manipulation of the argument exer leads to sql injection. It is possi
How urgent is CVE-2022-2703?
Priority 41/100. Public exploit reference
Related CVEs
- CVE-2025-12610 MEDIUM 4.7 DOWNGRADE A vulnerability was determined in CodeAstro Gym Management System 1.0
- CVE-2025-12609 MEDIUM 4.7 DOWNGRADE A vulnerability was found in CodeAstro Gym Management System 1.0
- CVE-2025-10851 HIGH 7.3 DOWNGRADE A security flaw has been discovered in Campcodes Gym Management System 1.0
- CVE-2025-11589 MEDIUM 6.3 DOWNGRADE A security flaw has been discovered in CodeAstro Gym Management System 1.0
- CVE-2025-11592 MEDIUM 6.3 DOWNGRADE A vulnerability was detected in CodeAstro Gym Management System 1.0