CVE-2026-4550

Medium CVSS: 5.1

A vulnerability has been found in code-projects Simple Gym Management System up to 1.0. This affects an unknown part of the file /gym/func.php. Such manipulation of the argument Trainer_id/fname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Vendor

Product

CWE

CWE-74

Yayın Tarihi

2026-03-22 14:16:35

Güncelleme

2026-03-23 16:16:52

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-74 MEDIUM 2026

Referanslar

https://code-projects.org/ https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Time-Based%20Blind%20SQL%20Injection%20in%20%20Simple%20Gym%20Management%20System%20in%20PHP%20Product.md https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Time-Based%20Blind%20SQL%20Injection%20in%20Simple%20Gym%20Management%20System%20in%20PHP.md https://vuldb.com/?ctiid.352377 https://vuldb.com/?id.352377 https://vuldb.com/?submit.774838 https://vuldb.com/?submit.774839 https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Time-Based%20Blind%20SQL%20Injection%20in%20%20Simple%20Gym%20Management%20System%20in%20PHP%20Product.md