PT-2025-41305
CVE-2025-60311
·
Published
2025-10-08
·
Updated
2025-10-08
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ProjectWorlds Gym Management System version 1.0
Description
The software is susceptible to SQL Injection through the
id parameter in the 'profile/edit.php' page. This allows for potential unauthorized access or modification of data. The affected API endpoint is '/profile/edit.php'. The vulnerable parameter is id.Recommendations
Apply appropriate input validation and sanitization techniques to the
id parameter in the 'profile/edit.php' page to prevent SQL Injection attacks.Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾