CVE-2025-4465: itsourcecode Gym Management System ajax.php sql injection
A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?action=saveschedule. The manipulation of the argument memberid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4465?
CVE-2025-4465 is classified as a critical vulnerability that allows for SQL injection.
How does CVE-2025-4465 affect the Gym Management System?
CVE-2025-4465 affects the '/ajax.php?action=save_schedule' functionality by allowing manipulation of the 'member_id' argument.
What types of attacks can be launched due to CVE-2025-4465?
An attacker can execute SQL injection attacks through the vulnerable '/ajax.php?action=save_schedule' endpoint.
What versions of the Gym Management System are impacted by CVE-2025-4465?
CVE-2025-4465 affects the itsourcecode Gym Management System version 1.0.
How do I fix CVE-2025-4465?
To fix CVE-2025-4465, it is recommended to validate and sanitize input data, particularly the 'member_id' argument to prevent SQL injection.