CVE-2025-11589 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/user-payment.php. Performing a ma…
Medium CVSS: 5.3

CVE-2025-11589

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/user-payment.php. Performing a manipulation of the argument plan results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
Vendor
Codeastro
Product
Gym Management System
CWE
CWE-74
Yayın Tarihi
2025-10-10 22:15:37
Güncelleme
2026-02-24 08:16:15
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 Gym Management System MEDIUM Codeastro 2025

Referanslar

https://codeastro.com/ https://github.com/coppeliaz/cve/issues/2 https://vuldb.com/?ctiid.327910 https://vuldb.com/?id.327910 https://vuldb.com/?submit.671736