CodeAstro Gym Management System CVE-2025-11590
LOWSeverity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionCVE.org
A weakness has been identified in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/equipment-entry.php. Executing a manipulation of the argument ename can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.
AnalysisAI
SQL injection in CodeAstro Gym Management System 1.0 allows authenticated remote attackers to manipulate the ename parameter in /admin/equipment-entry.php, enabling database query modification with low confidentiality, integrity, and availability impact. Publicly available exploit code exists but real-world risk is minimal due to low EPSS score (0.03%, 8th percentile), limited scope impact, and requirement for authenticated access despite the network attack vector.
Technical ContextAI
The vulnerability exists in the PHP-based administrative interface file /admin/equipment-entry.php where user-supplied input (ename parameter) is improperly sanitized before being used in SQL queries. This is a classic CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component) manifestation, where the application fails to properly escape or parameterize the ename argument in SQL statement construction. The affected product is CodeAstro Gym Management System version 1.0, identified by CPE cpe:2.3:a:codeastro:gym_management_system:1.0:*:*:*:*:*:*:*. The vulnerability chain involves the web application accepting user input through HTTP requests to a PHP script that processes it directly into database queries without prepared statements or input validation.
RemediationAI
Primary remediation is to upgrade CodeAstro Gym Management System beyond version 1.0 if a patched version is available from the vendor; however, no specific patched version is confirmed in available data-contact CodeAstro directly at https://codeastro.com/ for patch availability and release timeline. Immediate compensating controls include: (1) restrict administrative access to /admin/equipment-entry.php via network firewall or Web Application Firewall (WAF) rules to trusted IP addresses only, reducing exposure to authenticated attack surface; (2) implement input validation and prepared statements (parameterized queries) in the equipment-entry.php file by using PHP PDO or mysqli with bound parameters instead of string concatenation for the ename parameter; (3) apply SQL error suppression to prevent information disclosure about database schema; (4) conduct a code audit of all other admin PHP files for similar SQL injection patterns, as the identified file may not be the only vulnerable entry point. The trade-off of IP-based restrictions is reduced accessibility for remote administrators-consider VPN or bastion host architecture as an alternative. Until patched, organizations should disable the equipment entry feature if not actively used.
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it
sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear
The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by
ProjectSend versions prior to r1720 are affected by an improper authentication vulnerability. Rated critical severity (C
Roundcube Webmail contains a critical PHP object deserialization vulnerability (CVE-2025-49113, CVSS 9.9) that allows au
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP c
Palo Alto Networks PAN-OS management web interface contains an authentication bypass allowing unauthenticated attackers
Nagios XI version xi-5.7.5 is affected by OS command injection. Rated high severity (CVSS 8.8), this vulnerability is re
Nagios XI version xi-5.7.5 is affected by OS command injection. Rated high severity (CVSS 8.8), this vulnerability is re
The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows
The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1
Share
External POC / Exploit Code
Leaving vuln.today