CVE-2025-4195 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /ajax…
Medium CVSS: 6.9

CVE-2025-4195

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /ajax.php?action=save_member. The manipulation of the argument umember_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Vendor
Admerc
Product
Gym Management System
CWE
CWE-74
Yayın Tarihi
2025-05-02 01:15:54
Güncelleme
2025-12-22 19:22:44
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 Gym Management System MEDIUM Admerc 2025

Referanslar

https://github.com/ARPANET-cybersecurity/vuldb/issues/6 https://itsourcecode.com/ https://vuldb.com/?ctiid.306808 https://vuldb.com/?id.306808 https://vuldb.com/?submit.561876 https://github.com/XuepengZhao-insp/vuldb/issues/6