CVE-2025-1380: Codezips Gym Management System del_plan.php sql injection
A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/delplan.php. The manipulation of the argument name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1380?
CVE-2025-1380 is classified as a critical vulnerability.
What type of vulnerability is CVE-2025-1380?
CVE-2025-1380 is a SQL injection vulnerability found in the Codezips Gym Management System.
How does CVE-2025-1380 affect the Codezips Gym Management System?
CVE-2025-1380 allows remote attackers to manipulate the argument name in the file /dashboard/admin/del_plan.php.
How do I fix CVE-2025-1380?
To fix CVE-2025-1380, sanitize input parameters and implement prepared statements in SQL queries.
Which software is impacted by CVE-2025-1380?
CVE-2025-1380 affects the Codezips Gym Management System version 1.0.