CVE-2025-12242: CodeAstro Gym Management System check-attendance.php sql injection
A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendance.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12242?
CVE-2025-12242 has a critical severity due to its potential for remote exploitation through SQL injection.
How does CVE-2025-12242 affect the CodeAstro Gym Management System?
CVE-2025-12242 affects the CodeAstro Gym Management System's /admin/actions/check-attendance.php file, allowing attackers to manipulate the ID argument.
How can I fix CVE-2025-12242?
To fix CVE-2025-12242, sanitize and parameterize the inputs to the SQL queries in the affected file.
Can CVE-2025-12242 be exploited remotely?
Yes, CVE-2025-12242 can be exploited remotely, allowing attackers to execute malicious SQL commands.
What type of attack is associated with CVE-2025-12242?
CVE-2025-12242 is associated with an SQL injection attack that can compromise the database integrity.