Threats tagged 'ghsa-jxvf-842c-pjmw'

CodeAstro Gym Management System 1.0 contains a SQL injection vulnerability in the /admin/update-progress.php file. This flaw arises from improper handling of the id and ini_weight parameters, allowing remote attackers with high privileges to manipulate SQL queries. The vulnerability has a medium severity score of 4.7 and public exploit code is available.