CVE-2025-1206: Codezips Gym Management System viewdetailroutine.php sql injection
First published: Wed Feb 12 2025(Updated: )
A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file /dashboard/admin/viewdetailroutine.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Gym Management System | ||
| Gym Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-1206?
CVE-2025-1206 has been classified as a critical severity vulnerability.
How does CVE-2025-1206 impact the Codezips Gym Management System?
CVE-2025-1206 allows for SQL injection through manipulation of the 'id' argument in the /dashboard/admin/viewdetailroutine.php file.
How can I mitigate CVE-2025-1206?
Mitigation for CVE-2025-1206 should include input sanitization and implementing prepared statements in database queries.
What are the potential consequences of exploiting CVE-2025-1206?
Exploiting CVE-2025-1206 could lead to unauthorized access to sensitive data and potential database compromise.
Is there a patch available for CVE-2025-1206?
As of now, it is recommended to check with the vendor for any available patches or updates addressing CVE-2025-1206.
- agent/references
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/source
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- vendor/codezips
- canonical/gym management system
- version/gym management system/1.0