CVE-2026-4550

A vulnerability has been found in code-projects Simple Gym Management System up to 1.0. This affects an unknown part of the file /gym/func.php. Such manipulation of the argument Trainer_id/fname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

• CWE-74
• CWE-89

• https://code-projects.org/
• https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Time-Based%20Blind%20SQL%20Injection%20in%20%20Simple%20Gym%20Management%20System%20in%20PHP%20Product.md
• https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Time-Based%20Blind%20SQL%20Injection%20in%20Simple%20Gym%20Management%20System%20in%20PHP.md
• https://vuldb.com/?ctiid.352377
• https://vuldb.com/?id.352377
• https://vuldb.com/?submit.774838
• https://vuldb.com/?submit.774839
• https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Time-Based%20Blind%20SQL%20Injection%20in%20%20Simple%20Gym%20Management%20System%20in%20PHP%20Product.md

Published

Mar 22, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-45494Microsoft Edge (Chromium-based) Spoofing Vulnerability6.1
• CVE-2026-45495Microsoft Edge (Chromium-based) Remote Code Execution Vulner…9.8
• CVE-2026-45496Improper limitation of a pathname to a restricted directory …5.5
• CVE-2026-45497Improper neutralization of special elements used in a comman…8.8
• CVE-2026-45498Microsoft Defender Denial of Service Vulnerability7.5
• CVE-2026-45499Server-side request forgery (ssrf) in Azure OpenAI allows an…8.8
• CVE-2026-45500Improper neutralization of input during web page generation …6.1
• CVE-2026-45501Server-side request forgery (ssrf) in Microsoft Exchange Ser…6.1
• CVE-2026-45502Server-side request forgery (ssrf) in Microsoft Exchange Ser…5
• CVE-2026-45503Improper authorization in Microsoft Exchange Server allows a…6.5
• CVE-2026-45504Server-side request forgery (ssrf) in Microsoft Exchange Ser…8.8
• CVE-2026-45505Improper Input Validation, Improper Control of Generation of…8.8