CVE-2025-12609: CodeAstro Gym Management System update-progress.php sql injection
A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing a manipulation of the argument id/iniweight results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12609?
CVE-2025-12609 is classified as a high severity vulnerability due to its potential for SQL injection.
How do I fix CVE-2025-12609?
To fix CVE-2025-12609, ensure that input validation and parameterized queries are implemented in the /admin/update-progress.php file.
What software is affected by CVE-2025-12609?
CVE-2025-12609 affects version 1.0 of the CodeAstro Gym Management System.
Can CVE-2025-12609 be exploited remotely?
Yes, CVE-2025-12609 can be exploited remotely by manipulating the argument id/ini_weight.
What type of vulnerability is CVE-2025-12609?
CVE-2025-12609 is a SQL injection vulnerability.