← Database

CVE-2025-11592

MEDIUM CVSS: 6.3 Published: 2025-10-11 Modified: 2026-06-17

Description

A vulnerability was detected in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/edit-equipmentform.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit is now public and may be used.

Affected Platforms

Codeastro Gym Management System

Weakness Type

CWE-74, CWE-89, CWE-89

References