CVE-2025-11592: CodeAstro Gym Management System edit-equipmentform.php sql injection
A vulnerability was detected in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/edit-equipmentform.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11592?
CVE-2025-11592 has a high severity rating due to its SQL injection vulnerability allowing remote exploitation.
How do I fix CVE-2025-11592?
To fix CVE-2025-11592, sanitize and validate user inputs in the /admin/edit-equipmentform.php file to prevent SQL injection.
What systems are affected by CVE-2025-11592?
CVE-2025-11592 affects CodeAstro Gym Management System version 1.0.
How can CVE-2025-11592 be exploited?
CVE-2025-11592 can be exploited by manipulating the ID argument in the vulnerable /admin/edit-equipmentform.php file.
Is there a public exploit available for CVE-2025-11592?
Yes, there is a public exploit available for CVE-2025-11592 that can be used to launch attacks remotely.