CVE-2025-1206: Codezips Gym Management System viewdetailroutine.php sql injection
A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file /dashboard/admin/viewdetailroutine.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1206?
CVE-2025-1206 has been classified as a critical severity vulnerability.
How does CVE-2025-1206 impact the Codezips Gym Management System?
CVE-2025-1206 allows for SQL injection through manipulation of the 'id' argument in the /dashboard/admin/viewdetailroutine.php file.
How can I mitigate CVE-2025-1206?
Mitigation for CVE-2025-1206 should include input sanitization and implementing prepared statements in database queries.
What are the potential consequences of exploiting CVE-2025-1206?
Exploiting CVE-2025-1206 could lead to unauthorized access to sensitive data and potential database compromise.
Is there a patch available for CVE-2025-1206?
As of now, it is recommended to check with the vendor for any available patches or updates addressing CVE-2025-1206.