Filtered by vendor Projectworlds Subscriptions
Filtered by product Gym Management System Project Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-60311 1 Projectworlds 2 Gym Management System, Gym Management System Project 2025-10-16 8.8 High
ProjectWorlds Gym Management System1.0 is vulnerable to SQL Injection via the "id" parameter in the profile/edit.php page
CVE-2023-5185 1 Projectworlds 1 Gym Management System Project 2024-11-21 9.1 Critical
Gym Management System Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'file' parameter of profile/i.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.