CVE-2025-1188: Codezips Gym Management System updateroutine.php sql injection
A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /dashboard/admin/updateroutine.php. The manipulation of the argument tid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1188?
CVE-2025-1188 is classified as a critical vulnerability.
How do I fix CVE-2025-1188?
To fix CVE-2025-1188, you should sanitize and validate the input for the tid parameter in the /dashboard/admin/updateroutine.php file to prevent SQL injection.
What impacts does CVE-2025-1188 have on the Codezips Gym Management System?
CVE-2025-1188 allows attackers to exploit SQL injection vulnerabilities, potentially compromising the database and sensitive information.
Which versions of Codezips Gym Management System are affected by CVE-2025-1188?
CVE-2025-1188 affects version 1.0 of the Codezips Gym Management System.
What kind of attack can be executed through CVE-2025-1188?
CVE-2025-1188 can be exploited through SQL injection attacks by manipulating the tid argument.