CVE-2025-0880: Codezips Gym Management System updateplan.php sql injection
A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/updateplan.php. The manipulation of the argument planid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0880?
CVE-2025-0880 is classified as a critical vulnerability.
How does CVE-2025-0880 exploit the system?
CVE-2025-0880 exploits the system through SQL injection via manipulation of the argument planid in the file /dashboard/admin/updateplan.php.
Can CVE-2025-0880 be exploited remotely?
Yes, the attack associated with CVE-2025-0880 can be initiated remotely.
Which software versions are affected by CVE-2025-0880?
CVE-2025-0880 affects Codezips Gym Management System version 1.0.
How can I mitigate the risk of CVE-2025-0880?
To mitigate CVE-2025-0880, it is advised to sanitize user inputs and update to a patched version of the Codezips Gym Management System if available.