CNNVD-202511-101 Information

CNNVD ID

CNNVD-202511-101

CVE-2025-12610

  • CNNVD Published: 2025-11-03

Description (Chinese)

CodeAstro Gym Management System是CodeAstro公司的一个健身房管理系统。 CodeAstro Gym Management System 1.0版本存在SQL注入漏洞,该漏洞源于对文件/admin/view-progress-report.php中参数ID的错误操作,可能导致SQL注入攻击。

Description (English)

CodeAstro Gym Management System is a gymnasium management system for CodeAstro. Version 1.0 of CodeAstro Gym Management System has an injection loophole in SQL, which is the result of an error in the operation of parameter ID in document/admin/view-report.php, which could lead to an attack on SQL injection.

Hazard Level

High

Vulnerability Type

SQL注入

Affected Vendor

CodeAstro

Published

2025-11-03

Last Modified

2026-02-24

References

https://vuldb.com/?ctiid.330905 https://codeastro.com/ https://vuldb.com/?id.330905 https://vuldb.com/?submit.678450 https://vuldb.com/?submit.683064 https://github.com/danz0424/loudong/issues/1

Share on: