Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Gym Management System — Vulnerabilities & Security Advisories 60

All 60 CVE vulnerabilities found in Gym Management System, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known vulnerability weaknesses for the Gym Management System product developed by the vendor, categorized under relevant security weakness tags. It collects reports of diverse security flaws, including authentication bypasses, injection attacks, and insecure direct object references, covering incidents and advisories from January 2018 through December 2023. By reviewing this consolidated data, users can effectively track a vendor's security advisories over time, gain a deeper understanding of specific weakness classes and their prevalence in this domain, and look up the product's detailed vulnerability history to assess long-term risk exposure. The content focuses on providing a comprehensive view of security issues without emphasizing marketing narratives or welcoming the user with generic boilerplate text. It serves as a technical resource for security analysts and system administrators who need to evaluate the robustness of the Gym Management System against established threat patterns. The data is sourced from verified advisories and public disclosures, ensuring that the information reflects actual reported incidents rather than theoretical possibilities. This approach allows stakeholders to make informed decisions regarding system patches, configuration hardening, and third-party risk assessments. By centralizing these records, the page facilitates a clearer picture of the product's security posture and helps identify recurring issues that may require architectural changes or stricter access controls. Users are encouraged to cross-reference this information with current threat intelligence feeds to stay updated on emerging exploits targeting similar gym management architectures.

Vendor: SourceCodester

CVE IDTitleCVSSSeverityPublished
CVE-2026-7553 code-projects Gym Management System edit_exercises.php sql injection CWE-89 4.7 Medium2026-05-01
CVE-2025-13172 CodeAstro Gym Management System view-member-report.php sql injection CWE-89 6.3 Medium2025-11-14
CVE-2025-12610 CodeAstro Gym Management System view-progress-report.php sql injection CWE-89 4.7 Medium2025-11-03
CVE-2025-12609 CodeAstro Gym Management System update-progress.php sql injection CWE-89 4.7 Medium2025-11-03
CVE-2025-12261 CodeAstro Gym Management System remove-announcement.php sql injection CWE-89 6.3 Medium2025-10-27
CVE-2025-12242 CodeAstro Gym Management System check-attendance.php sql injection CWE-89 6.3 Medium2025-10-27
CVE-2025-11593 CodeAstro Gym Management System delete-equipment.php sql injection CWE-89 6.3 Medium2025-10-11
CVE-2025-11592 CodeAstro Gym Management System edit-equipmentform.php sql injection CWE-89 6.3 Medium2025-10-11
CVE-2025-11591 CodeAstro Gym Management System delete-member.php sql injection CWE-89 6.3 Medium2025-10-11
CVE-2025-11590 CodeAstro Gym Management System equipment-entry.php sql injection CWE-89 6.3 Medium2025-10-11
CVE-2025-11589 CodeAstro Gym Management System user-payment.php sql injection CWE-89 6.3 Medium2025-10-10
CVE-2025-11588 CodeAstro Gym Management System index.php sql injection CWE-89 6.3 Medium2025-10-10
CVE-2025-10851 Campcodes Gym Management System ajax.php sql injection CWE-89 7.3 High2025-09-23
CVE-2025-6476 SourceCodester Gym Management System cross-site request forgery CWE-352 4.3 Medium2025-06-22
CVE-2025-4488 itsourcecode Gym Management System ajax.php sql injection CWE-89 7.3 High2025-05-09
CVE-2025-4487 itsourcecode Gym Management System ajax.php sql injection CWE-89 7.3 High2025-05-09
CVE-2025-4486 itsourcecode Gym Management System ajax.php sql injection CWE-89 7.3 High2025-05-09
CVE-2025-4485 itsourcecode Gym Management System ajax.php sql injection CWE-89 7.3 High2025-05-09
CVE-2025-4484 itsourcecode Gym Management System ajax.php sql injection CWE-89 7.3 High2025-05-09
CVE-2025-4483 itsourcecode Gym Management System view_pdetails.php sql injection CWE-89 7.3 High2025-05-09
CVE-2025-4466 itsourcecode Gym Management System ajax.php sql injection CWE-89 7.3 High2025-05-09
CVE-2025-4465 itsourcecode Gym Management System ajax.php sql injection CWE-89 7.3 High2025-05-09
CVE-2025-4464 itsourcecode Gym Management System ajax.php sql injection CWE-89 7.3 High2025-05-09
CVE-2025-4463 itsourcecode Gym Management System ajax.php sql injection CWE-89 7.3 High2025-05-09
CVE-2025-4363 itsourcecode Gym Management System ajax.php sql injection CWE-89 7.3 High2025-05-06
CVE-2025-4362 itsourcecode Gym Management System ajax.php sql injection CWE-89 7.3 High2025-05-06
CVE-2025-4360 itsourcecode Gym Management System view_member.php sql injection CWE-89 7.3 High2025-05-06
CVE-2025-4359 itsourcecode Gym Management System ajax.php sql injection CWE-89 7.3 High2025-05-06
CVE-2025-4195 itsourcecode Gym Management System ajax.php sql injection CWE-89 7.3 High2025-05-02
CVE-2025-3151 SourceCodester Gym Management System signup.php sql injection CWE-89 7.3 High2025-04-03

All 60 known CVE vulnerabilities affecting Gym Management System with full Chinese analysis, references, and POCs where available.