CVE-2025-4195: itsourcecode Gym Management System ajax.php sql injection
A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /ajax.php?action=savemember. The manipulation of the argument umemberid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4195?
CVE-2025-4195 is classified as a critical vulnerability.
How does CVE-2025-4195 affect Gym Management System?
CVE-2025-4195 allows for SQL injection through the manipulation of the umember_id argument in the /ajax.php?action=save_member file.
How do I fix CVE-2025-4195?
To fix CVE-2025-4195, ensure proper input validation and parameterized queries to mitigate SQL injection risks.
Can CVE-2025-4195 be exploited remotely?
Yes, CVE-2025-4195 can be exploited remotely, allowing an attacker to manipulate the system from an external location.
What versions of Gym Management System are affected by CVE-2025-4195?
CVE-2025-4195 affects Gym Management System version 1.0.