CVE-2025-1959 — Codezips Gym Management System change_s_pwd.php sql injection
A vulnerability, which was classified as critical, was found in Codezips Gym Management System 1.0. Affected is an unknown function of the file /change_s_pwd.php. The manipulati…
Published: 2025-03-04 · CVSS: 6.9 · CVSS 4.0
A vulnerability, which was classified as critical, was found in Codezips Gym Management System 1.0. Affected is an unknown function of the file /change_s_pwd.php. The manipulation of the argument login_id/login_key leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7