CVE-2025-12242

HIGH 8.8CVE-2025-12242 · Published 27/10/2025 · updated 08/10/2026

Package	Affected versions	Patched versions
gym management system codeastro	`= 1.0`	No fix yet

Description

A vulnerability has been found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendance.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

References

codeastro.com · Product
yihaofuweng/cve · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free