https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-55271.htmlhttps://patchthecve.com/cve/CVE-2024-55271.htmlWed, 17 Jun 2026 08:11:04 +0000LOW 3.5: A Cross-Site Request Forgery (CSRF) vulnerability has been identified in phpgurukul Gym Management System 1.0. This issue is present in the profile update functionality of the User Panel, specifically the /profile.php endpoint.https://patchthecve.com/cve/CVE-2025-67146.htmlhttps://patchthecve.com/cve/CVE-2025-67146.htmlWed, 17 Jun 2026 09:57:28 +0000CRITICAL 9.4: Multiple SQL Injection vulnerabilities exist in AbhishekMali21 GYM-MANAGEMENT-SYSTEM 1.0 via the 'name' parameter in (1) member_search.php, (2) trainer_search.php, and (3) gym_search.php, and via the 'id' parameter in (4) payment_search.php. An unauthenticated remote attacker can exploit these issuehttps://patchthecve.com/cve/CVE-2025-13172.htmlhttps://patchthecve.com/cve/CVE-2025-13172.htmlWed, 07 Oct 2026 21:10:00 +0000MEDIUM 6.3: A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the pubhttps://patchthecve.com/cve/CVE-2025-12610.htmlhttps://patchthecve.com/cve/CVE-2025-12610.htmlSun, 18 Oct 2026 21:10:00 +0000MEDIUM 4.7: A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and mayhttps://patchthecve.com/cve/CVE-2025-12609.htmlhttps://patchthecve.com/cve/CVE-2025-12609.htmlSun, 18 Oct 2026 21:10:00 +0000MEDIUM 4.7: A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing a manipulation of the argument id/ini_weight results in sql injection. The attack may be initiated remotely. The exploit has been https://patchthecve.com/cve/CVE-2025-12261.htmlhttps://patchthecve.com/cve/CVE-2025-12261.htmlThu, 08 Oct 2026 11:10:00 +0000MEDIUM 6.3: A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and couhttps://patchthecve.com/cve/CVE-2025-12242.htmlhttps://patchthecve.com/cve/CVE-2025-12242.htmlThu, 08 Oct 2026 11:10:00 +0000MEDIUM 6.3: A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendance.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been dihttps://patchthecve.com/cve/CVE-2025-11593.htmlhttps://patchthecve.com/cve/CVE-2025-11593.htmlThu, 08 Oct 2026 13:10:00 +0000MEDIUM 6.3: A flaw has been found in CodeAstro Gym Management System 1.0. This vulnerability affects unknown code of the file /admin/actions/delete-equipment.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.https://patchthecve.com/cve/CVE-2025-11592.htmlhttps://patchthecve.com/cve/CVE-2025-11592.htmlThu, 08 Oct 2026 13:10:00 +0000MEDIUM 6.3: A vulnerability was detected in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/edit-equipmentform.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit is now public and may be used.https://patchthecve.com/cve/CVE-2025-11591.htmlhttps://patchthecve.com/cve/CVE-2025-11591.htmlThu, 08 Oct 2026 13:10:00 +0000MEDIUM 6.3: A security vulnerability has been detected in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/actions/delete-member.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has beenhttps://patchthecve.com/cve/CVE-2025-11590.htmlhttps://patchthecve.com/cve/CVE-2025-11590.htmlThu, 08 Oct 2026 13:10:00 +0000MEDIUM 6.3: A weakness has been identified in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/equipment-entry.php. Executing a manipulation of the argument ename can lead to sql injection. It is possible to launch the attack remotely. The exploihttps://patchthecve.com/cve/CVE-2025-11589.htmlhttps://patchthecve.com/cve/CVE-2025-11589.htmlThu, 08 Oct 2026 13:10:00 +0000MEDIUM 6.3: A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/user-payment.php. Performing a manipulation of the argument plan results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to thttps://patchthecve.com/cve/CVE-2025-11588.htmlhttps://patchthecve.com/cve/CVE-2025-11588.htmlThu, 08 Oct 2026 13:10:00 +0000MEDIUM 6.3: A vulnerability was identified in CodeAstro Gym Management System 1.0. This impacts an unknown function of the file /customer/index.php. Such manipulation of the argument fullname leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.https://patchthecve.com/cve/CVE-2025-60311.htmlhttps://patchthecve.com/cve/CVE-2025-60311.htmlWed, 17 Jun 2026 09:49:39 +0000HIGH 8.8: ProjectWorlds Gym Management System1.0 is vulnerable to SQL Injection via the "id" parameter in the profile/edit.php pagehttps://patchthecve.com/cve/CVE-2025-10851.htmlhttps://patchthecve.com/cve/CVE-2025-10851.htmlSun, 11 Oct 2026 20:10:00 +0000HIGH 7.3: A security flaw has been discovered in Campcodes Gym Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to https://patchthecve.com/cve/CVE-2025-6476.htmlhttps://patchthecve.com/cve/CVE-2025-6476.htmlWed, 17 Jun 2026 10:01:58 +0000MEDIUM 4.3: A vulnerability was found in SourceCodester Gym Management System 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be uhttps://patchthecve.com/cve/CVE-2025-4488.htmlhttps://patchthecve.com/cve/CVE-2025-4488.htmlWed, 17 Jun 2026 09:33:21 +0000HIGH 7.3: A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_package. The manipulation of the argument ID leads to sql injection. The attack can be launched remotehttps://patchthecve.com/cve/CVE-2025-4487.htmlhttps://patchthecve.com/cve/CVE-2025-4487.htmlWed, 17 Jun 2026 09:33:21 +0000HIGH 7.3: A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=delete_member. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit hhttps://patchthecve.com/cve/CVE-2025-4486.htmlhttps://patchthecve.com/cve/CVE-2025-4486.htmlWed, 17 Jun 2026 09:33:21 +0000HIGH 7.3: A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=delete_plan. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been https://patchthecve.com/cve/CVE-2025-4485.htmlhttps://patchthecve.com/cve/CVE-2025-4485.htmlWed, 17 Jun 2026 09:33:21 +0000HIGH 7.3: A vulnerability has been found in itsourcecode Gym Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=delete_trainer. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has https://patchthecve.com/cve/CVE-2025-4484.htmlhttps://patchthecve.com/cve/CVE-2025-4484.htmlWed, 17 Jun 2026 09:33:21 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. This affects an unknown part of the file /ajax.php?action=delete_user. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has bhttps://patchthecve.com/cve/CVE-2025-4483.htmlhttps://patchthecve.com/cve/CVE-2025-4483.htmlWed, 17 Jun 2026 09:33:21 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /view_pdetails.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The explohttps://patchthecve.com/cve/CVE-2025-4466.htmlhttps://patchthecve.com/cve/CVE-2025-4466.htmlWed, 17 Jun 2026 09:33:18 +0000HIGH 7.3: A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?action=save_payment. The manipulation of the argument registration_id leads to sql injection. It is possible to initiate the attack remotely. Thhttps://patchthecve.com/cve/CVE-2025-4465.htmlhttps://patchthecve.com/cve/CVE-2025-4465.htmlWed, 17 Jun 2026 09:33:18 +0000HIGH 7.3: A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_schedule. The manipulation of the argument member_id leads to sql injection. The attack may be launched remotely. Thehttps://patchthecve.com/cve/CVE-2025-4464.htmlhttps://patchthecve.com/cve/CVE-2025-4464.htmlWed, 17 Jun 2026 09:33:18 +0000HIGH 7.3: A vulnerability has been found in itsourcecode Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=save_plan. The manipulation of the argument plan leads to sql injection. The attack can be launched remotely. Thttps://patchthecve.com/cve/CVE-2025-4463.htmlhttps://patchthecve.com/cve/CVE-2025-4463.htmlWed, 17 Jun 2026 09:33:18 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. Affected is an unknown function of the file /ajax.php?action=save_package. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit hashttps://patchthecve.com/cve/CVE-2025-4363.htmlhttps://patchthecve.com/cve/CVE-2025-4363.htmlWed, 17 Jun 2026 09:33:07 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=end_membership. The manipulation of the argument rid leads to sql injection. The attack may be initiated remotely. The https://patchthecve.com/cve/CVE-2025-4362.htmlhttps://patchthecve.com/cve/CVE-2025-4362.htmlWed, 17 Jun 2026 09:33:06 +0000HIGH 7.3: A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=save_membership. The manipulation of the argument member_id leads to sql injection. The attack can be initiated remotely. The exploit has bhttps://patchthecve.com/cve/CVE-2025-4360.htmlhttps://patchthecve.com/cve/CVE-2025-4360.htmlWed, 17 Jun 2026 09:33:06 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /view_member.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploithttps://patchthecve.com/cve/CVE-2025-4359.htmlhttps://patchthecve.com/cve/CVE-2025-4359.htmlWed, 17 Jun 2026 09:33:06 +0000HIGH 7.3: A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_member. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The explhttps://patchthecve.com/cve/CVE-2025-4195.htmlhttps://patchthecve.com/cve/CVE-2025-4195.htmlWed, 17 Jun 2026 09:32:44 +0000HIGH 7.3: A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /ajax.php?action=save_member. The manipulation of the argument umember_id leads to sql injection. The attack can be initiated remotely. The explohttps://patchthecve.com/cve/CVE-2025-3151.htmlhttps://patchthecve.com/cve/CVE-2025-3151.htmlWed, 17 Jun 2026 09:19:17 +0000HIGH 7.3: A vulnerability was found in SourceCodester Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /signup.php. The manipulation of the argument user_name leads to sql injection. The attack may be launched remotely. The exploit has https://patchthecve.com/cve/CVE-2025-29208.htmlhttps://patchthecve.com/cve/CVE-2025-29208.htmlWed, 17 Jun 2026 09:05:12 +0000MEDIUM 6.5: CodeZips Gym Management System v1.0 is vulnerable to SQL injection in the name parameter within /dashboard/admin/deleteroutine.php.https://patchthecve.com/cve/CVE-2025-2847.htmlhttps://patchthecve.com/cve/CVE-2025-2847.htmlWed, 17 Jun 2026 09:07:43 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. This issue affects some unknown processing of the file /dashboard/admin/over_month.php. The manipulation of the argument mm leads to sql injection. The attack may be initiated remotely. The explohttps://patchthecve.com/cve/CVE-2025-1959.htmlhttps://patchthecve.com/cve/CVE-2025-1959.htmlWed, 17 Jun 2026 08:40:25 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in Codezips Gym Management System 1.0. Affected is an unknown function of the file /change_s_pwd.php. The manipulation of the argument login_id/login_key leads to sql injection. It is possible to launch the attack remotely. The exploit hashttps://patchthecve.com/cve/CVE-2025-1856.htmlhttps://patchthecve.com/cve/CVE-2025-1856.htmlWed, 17 Jun 2026 08:39:54 +0000HIGH 7.3: A vulnerability was found in Codezips Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/gen_invoice.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The explhttps://patchthecve.com/cve/CVE-2025-1854.htmlhttps://patchthecve.com/cve/CVE-2025-1854.htmlWed, 17 Jun 2026 08:39:54 +0000MEDIUM 6.3: A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/del_member.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit hahttps://patchthecve.com/cve/CVE-2025-1380.htmlhttps://patchthecve.com/cve/CVE-2025-1380.htmlWed, 17 Jun 2026 08:39:01 +0000MEDIUM 6.3: A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/del_plan.php. The manipulation of the argument name leads to sql injection. The attack may be launched remotely. The exploit hhttps://patchthecve.com/cve/CVE-2025-1206.htmlhttps://patchthecve.com/cve/CVE-2025-1206.htmlWed, 17 Jun 2026 08:38:36 +0000MEDIUM 6.3: A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file /dashboard/admin/viewdetailroutine.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploihttps://patchthecve.com/cve/CVE-2025-1188.htmlhttps://patchthecve.com/cve/CVE-2025-1188.htmlWed, 17 Jun 2026 08:38:33 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /dashboard/admin/updateroutine.php. The manipulation of the argument tid leads to sql injection. The attack may be launched remotehttps://patchthecve.com/cve/CVE-2025-1183.htmlhttps://patchthecve.com/cve/CVE-2025-1183.htmlWed, 17 Jun 2026 08:38:33 +0000MEDIUM 6.3: A vulnerability has been found in CodeZips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/more-userprofile.php. The manipulation of the argument login_id leads to sql injection. The attack can be launched https://patchthecve.com/cve/CVE-2025-0881.htmlhttps://patchthecve.com/cve/CVE-2025-0881.htmlWed, 17 Jun 2026 08:27:18 +0000MEDIUM 6.3: A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/saveroutine.php. The manipulation of the argument rname leads to sql injection. It is possible to launch the attack remotely. The exploit https://patchthecve.com/cve/CVE-2025-0880.htmlhttps://patchthecve.com/cve/CVE-2025-0880.htmlWed, 17 Jun 2026 08:27:18 +0000MEDIUM 6.3: A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/updateplan.php. The manipulation of the argument planid leads to sql injection. The attack may be initiated remotely. The exploit has behttps://patchthecve.com/cve/CVE-2025-0803.htmlhttps://patchthecve.com/cve/CVE-2025-0803.htmlWed, 17 Jun 2026 08:27:10 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /dashboard/admin/submit_plan_new.php. The manipulation of the argument planid leads to sql injection. The attack may be launched rhttps://patchthecve.com/cve/CVE-2025-0562.htmlhttps://patchthecve.com/cve/CVE-2025-0562.htmlWed, 17 Jun 2026 08:26:42 +0000MEDIUM 6.3: A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/health_status_entry.php. The manipulation of the argument usrid leads to sql injection. The attack may be initiated remotely. The exploihttps://patchthecve.com/cve/CVE-2025-0541.htmlhttps://patchthecve.com/cve/CVE-2025-0541.htmlWed, 17 Jun 2026 08:26:40 +0000MEDIUM 6.3: A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/edit_member.php. The manipulation of the argument name leads to sql injection. The attack may be initiated remotely. The exploit has beehttps://patchthecve.com/cve/CVE-2025-0535.htmlhttps://patchthecve.com/cve/CVE-2025-0535.htmlWed, 17 Jun 2026 08:26:40 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in Codezips Gym Management System 1.0. This affects an unknown part of the file /dashboard/admin/edit_mem_submit.php. The manipulation of the argument uid leads to sql injection. It is possible to initiate the attack remotely. The exploit has beehttps://patchthecve.com/cve/CVE-2025-0532.htmlhttps://patchthecve.com/cve/CVE-2025-0532.htmlWed, 17 Jun 2026 08:26:39 +0000MEDIUM 6.3: A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/new_submit.php. The manipulation of the argument m_id leads to sql injection. It is possible to launch the attack remotely. The exploit hahttps://patchthecve.com/cve/CVE-2024-6652.htmlhttps://patchthecve.com/cve/CVE-2024-6652.htmlWed, 17 Jun 2026 08:18:25 +0000MEDIUM 6.3: A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file manage_member.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclohttps://patchthecve.com/cve/CVE-2024-6041.htmlhttps://patchthecve.com/cve/CVE-2024-6041.htmlWed, 17 Jun 2026 08:17:09 +0000MEDIUM 6.3: A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit