CVE-2025-2847: Codezips Gym Management System over_month.php sql injection
A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. This issue affects some unknown processing of the file /dashboard/admin/overmonth.php. The manipulation of the argument mm leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2847?
CVE-2025-2847 is classified as critical due to its potential for SQL injection exploitation.
How do I fix CVE-2025-2847?
To fix CVE-2025-2847, ensure proper input validation and parameterized queries in the /dashboard/admin/over_month.php file.
What systems are affected by CVE-2025-2847?
CVE-2025-2847 affects Codezips Gym Management System version 1.0.
What are the potential impacts of CVE-2025-2847?
The potential impacts of CVE-2025-2847 include unauthorized access to the database and data leakage.
How can I determine if my system is vulnerable to CVE-2025-2847?
You can determine if your system is vulnerable to CVE-2025-2847 by testing the /dashboard/admin/over_month.php file for SQL injection vulnerabilities.