CVE-2025-4359: itsourcecode Gym Management System ajax.php sql injection
A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletemember. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4359?
CVE-2025-4359 has been classified as a critical vulnerability.
What is the impact of CVE-2025-4359?
The impact of CVE-2025-4359 is SQL injection which can allow an attacker to manipulate database queries.
How do I fix CVE-2025-4359?
To fix CVE-2025-4359, it is recommended to sanitize and validate input parameters in the /ajax.php?action=delete_member function.
Which software is affected by CVE-2025-4359?
CVE-2025-4359 affects the itsourcecode Gym Management System version 1.0.
What can be done to mitigate CVE-2025-4359?
Mitigation for CVE-2025-4359 includes implementing prepared statements and parameterized queries to prevent SQL injection.