Threats tagged 'ghsa-3cxr-ph5g-jc8j'

CodeAstro Gym Management System 1.0 contains a SQL injection vulnerability in the /admin/view-member-report.php file. This flaw allows remote attackers with limited privileges to manipulate the ID parameter, potentially leading to unauthorized data access or modification. The vulnerability has a CVSS score of 6.3, indicating a medium severity level. Public exploit code is available, but no official patch or remediation has been provided yet.