CVE-2025-0541
CVSS 3.1 Score 6.3 of 10 (medium)
Details
Published Jan 17, 2025
CWE ID 74
CWE ID 89
Summary
CVE-2025-0541 is a critical vulnerability affecting the Codezips Gym Management System 1.0. The issue lies in the processing of the file /dashboard/admin/edit_member.php, where manipulation of argument names can lead to SQL injection. This vulnerability can be exploited remotely, allowing attackers to gain unauthorized access or perform malicious actions. The exploit for this vulnerability has been made public, increasing the risk for potential attacks. Additionally, other parameters within the system may also be vulnerable.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Gym Management System
Affected Vendors
- Codezips