Advisories · Technology

SourceCodester Gym Management System.

Every CVE that names SourceCodester Gym Management System among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-6476 CVE record

CVSS 5.3 Medium

SourceCodester Gym Management System cross-site request forgery
- SourceCodester Gym Management System
- Cross-site request forgery (CSRF)
- Broken access control
Not analysed yet 22 Jun 2025
CVE-2025-3151 CVE record

CVSS 6.9 Medium

SourceCodester Gym Management System signup.php sql injection
- SourceCodester Gym Management System
- Other injection
- SQL injection
Not analysed yet 3 Apr 2025
CVE-2022-2842 CVE record

CVSS 7.3 High

SourceCodester Gym Management System login.php sql injection
- SourceCodester Gym Management System
- SQL injection
Not analysed yet 22 Aug 2022
CVE-2022-2800 CVE record

CVSS 4.3 Medium

SourceCodester Gym Management System clickjacking
- SourceCodester Gym Management System
- CWE-451
Not analysed yet 12 Aug 2022
CVE-2022-2776 CVE record

CVSS 5.4 Medium

SourceCodester Gym Management System delete_user.php denial of service
- SourceCodester Gym Management System
- Denial of service
Not analysed yet 11 Aug 2022
CVE-2022-2749 CVE record

CVSS 4.7 Medium

SourceCodester Gym Management System unrestricted upload
- SourceCodester Gym Management System
- Unrestricted file upload
Not analysed yet 11 Aug 2022
CVE-2022-2745 CVE record

CVSS 6.3 Medium

SourceCodester Gym Management System Add New Trainer add_trainers.php sql injection
- SourceCodester Gym Management System
- SQL injection
Not analysed yet 11 Aug 2022
CVE-2022-2744 CVE record

CVSS 6.3 Medium

SourceCodester Gym Management System Background Management add_exercises.php unrestricted upload
- SourceCodester Gym Management System
- Unrestricted file upload
Not analysed yet 11 Aug 2022
CVE-2022-2728 CVE record

CVSS 6.3 Medium

SourceCodester Gym Management System index.php sql injection
- SourceCodester Gym Management System
- SQL injection
Not analysed yet 9 Aug 2022
CVE-2022-2727 CVE record

CVSS 6.3 Medium

SourceCodester Gym Management System login.php sql injection
- SourceCodester Gym Management System
- SQL injection
Not analysed yet 9 Aug 2022
CVE-2022-2708 CVE record

CVSS 5.5 Medium

SourceCodester Gym Management System login.php sql injection
- SourceCodester Gym Management System
- SQL injection
Not analysed yet 8 Aug 2022
CVE-2022-2703 CVE record

CVSS 6.3 Medium

SourceCodester Gym Management System Exercises Module sql injection
- SourceCodester Gym Management System
- SQL injection
Not analysed yet 8 Aug 2022
CVE-2022-2700 CVE record

CVSS 4.7 Medium

SourceCodester Gym Management System GET Parameter sql injection
- SourceCodester Gym Management System
- SQL injection
Not analysed yet 8 Aug 2022
CVE-2022-2687 CVE record

CVSS 6.3 Medium

SourceCodester Gym Management System sql injection
- SourceCodester Gym Management System
- SQL injection
Not analysed yet 6 Aug 2022