CVE-2025-4486: itsourcecode Gym Management System ajax.php sql injection
A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=deleteplan. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4486?
CVE-2025-4486 is classified as critical due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-4486?
To fix CVE-2025-4486, it is essential to sanitize and validate all user inputs, particularly the ID parameter in the /ajax.php?action=delete_plan file.
What systems are affected by CVE-2025-4486?
CVE-2025-4486 affects the itsourcecode Gym Management System version 1.0.
Can CVE-2025-4486 be exploited remotely?
Yes, CVE-2025-4486 can be exploited remotely through SQL injection techniques.
What should I do if I am using the Gym Management System version 1.0 and CVE-2025-4486 is identified?
If using the Gym Management System version 1.0 and CVE-2025-4486 is identified, you should immediately patch the system and apply proper input validation.