CVE-2025-12610: falha de média gravidade em CodeAstro Gym Management System
CodeAstro Gym Management System view-progress-report.php sql injection
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.1epss 0.4%
A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
CodeAstro · Gym Management SystemCVEs relacionadas — CodeAstro Gym Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2025-12261MEDIUMCodeAstro Gym Management System remove-announcement.php sql injectionEPSS 0.5%CVE-2025-11592MEDIUMCodeAstro Gym Management System edit-equipmentform.php sql injectionEPSS 0.4%CVE-2025-11589MEDIUMCodeAstro Gym Management System user-payment.php sql injectionEPSS 0.4%CVE-2025-12609MEDIUMCodeAstro Gym Management System update-progress.php sql injectionEPSS 0.4%CVE-2025-11593MEDIUMCodeAstro Gym Management System delete-equipment.php sql injectionEPSS 0.3%CVE-2025-11591MEDIUMCodeAstro Gym Management System delete-member.php sql injectionEPSS 0.3%