← Database

CVE-2025-12261

MEDIUM CVSS: 6.3 Published: 2025-10-27 Modified: 2026-06-17

Description

A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.

Affected Platforms

Codeastro Gym Management System

Weakness Type

CWE-74, CWE-89

References