CVE-2025-12610: CodeAstro Gym Management System view-progress-report.php sql injection
A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12610?
The severity of CVE-2025-12610 is considered critical due to its potential for remote SQL injection, which could compromise the database.
How do I fix CVE-2025-12610?
To fix CVE-2025-12610, sanitize and validate all user inputs, particularly those interacting with the database to prevent manipulation of SQL queries.
Who is affected by CVE-2025-12610?
CVE-2025-12610 affects users of CodeAstro Gym Management System version 1.0 due to vulnerabilities in the /admin/view-progress-report.php file.
Is remote exploitation possible with CVE-2025-12610?
Yes, CVE-2025-12610 can be exploited remotely, allowing an attacker to manipulate SQL queries via input parameters.
What parts of the system are vulnerable in CVE-2025-12610?
CVE-2025-12610 specifically affects the /admin/view-progress-report.php file in the CodeAstro Gym Management System.