CVE-2026-7553: code-projects Gym Management System edit_exercises.php sql injection
A vulnerability was found in code-projects Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit_exercises.php. The manipulation of the argument edit_exercise results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7553?
CVE-2026-7553 is classified as a high severity vulnerability due to the potential for SQL injection.
How do I fix CVE-2026-7553?
To fix CVE-2026-7553, validate and sanitize input parameters in the /admin/edit_exercises.php file.
Which version of the Gym Management System is affected by CVE-2026-7553?
CVE-2026-7553 affects version 1.0 of the Gym Management System by Code-Projects.
What type of vulnerability is CVE-2026-7553?
CVE-2026-7553 is a SQL injection vulnerability that can compromise the database.
Where is the vulnerable component located in CVE-2026-7553?
The vulnerable component related to CVE-2026-7553 is located in the file /admin/edit_exercises.php.