CVE-2025-0803: Codezips Gym Management System submit_plan_new.php sql injection
A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /dashboard/admin/submitplannew.php. The manipulation of the argument planid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0803?
CVE-2025-0803 has been classified as critical due to its potential for SQL injection exploits.
How do I fix CVE-2025-0803?
To fix CVE-2025-0803, validate and sanitize user inputs to prevent SQL injection in the /dashboard/admin/submit_plan_new.php file.
What systems are affected by CVE-2025-0803?
CVE-2025-0803 affects Codezips Gym Management System version 1.0.
What type of vulnerability is CVE-2025-0803?
CVE-2025-0803 is an SQL injection vulnerability.
Can CVE-2025-0803 lead to data breaches?
Yes, if exploited, CVE-2025-0803 can lead to unauthorized access to sensitive data in the database.