CVE-2026-7553

Description

A vulnerability was found in code-projects Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit_exercises.php. The manipulation of the argument edit_exercise results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.

CVSS Vector

References

• https://code-projects.org/
• https://fox-byte.yuque.com/org-wiki-fox-byte-ig3xms/rdgsp5/yg012bnp1xorwq0p
• https://vuldb.com/submit/805603
• https://vuldb.com/vuln/360361
• https://vuldb.com/vuln/360361/cti