CVE-2025-11593: CodeAstro Gym Management System delete-equipment.php sql injection
A flaw has been found in CodeAstro Gym Management System 1.0. This vulnerability affects unknown code of the file /admin/actions/delete-equipment.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11593?
CVE-2025-11593 is considered a high severity vulnerability due to its potential for SQL injection exploits.
How do I fix CVE-2025-11593?
To fix CVE-2025-11593, sanitize and validate all input data from the user, especially in the /admin/actions/delete-equipment.php file.
Who is affected by CVE-2025-11593?
CVE-2025-11593 affects users of CodeAstro Gym Management System version 1.0.
How can CVE-2025-11593 be exploited?
CVE-2025-11593 can be exploited by an attacker remotely manipulating the ID argument in the delete-equipment.php file.
Is there a patch available for CVE-2025-11593?
As of now, there is no official patch for CVE-2025-11593, so immediate mitigation through code review is recommended.