CVE-2025-1206
Last modified
CVE-2025-1206 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. EPSS estimates a 0.47% chance of exploitation in the next 30 days.
Description
A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file /dashboard/admin/viewdetailroutine.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Codezips | Gym Management System | 1.0 |
References
- https://github.com/sekaino-sakura/CVE/blob/main/CVE_1.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.295143Permissions Required, VDB Entry
- https://vuldb.com/?id.295143Permissions Required, VDB Entry
- https://vuldb.com/?submit.496961VDB Entry
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-1206?
How severe is CVE-2025-1206?
How do I fix CVE-2025-1206?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-12053The drivers in the tool packages use RTL_QUERY_REGISTRY_DIRE…7.8
- CVE-2025-12055HYDRA X, MIP 2 and FEDRA 2 of MPDV Mikrolab GmbH suffer from…7.5
- CVE-2025-12056Out-of-bounds Read in Shelly Pro 3EM (before v1.4.4) allows …8.3
- CVE-2025-12057The WavePlayer WordPress plugin before 3.8.0 does not have a…9.8
- CVE-2025-12058The Keras.Model.load_model method, including when executed w…5.9
- CVE-2025-12059Insertion of Sensitive Information into Externally-Accessibl…9.8
- CVE-2025-12060The keras.utils.get_file API in Keras, when used with the ex…8.9
- CVE-2025-12061The TAX SERVICE Electronic HDM WordPress plugin before 1.2.1…8.6
- CVE-2025-12062The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox…8.8
- CVE-2025-12063An insecure direct object reference allowed a non-admin user…5.7
- CVE-2025-12064The WP2Social Auto Publish plugin for WordPress is vulnerabl…6.1
- CVE-2025-12065The WP Carticon plugin for WordPress is vulnerable to Stored…4.4
Are you affected by CVE-2025-1206?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST