CVE-2023-37068
CRITICALSherlock Gym Management System - SQL Injection
Title source: ruleDescription
Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username and password fields, enabling SQL Injection attacks.
Exploits (1)
Scores
CVSS v3
9.8
EPSS
0.0027
EPSS Percentile
50.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-89
Status
published
Products (1)
sherlock/gym_management_system
1.0
Published
Aug 09, 2023
Tracked Since
Feb 18, 2026