CVE-2024-6652 – itsourcecode Gym Management System manage_member.php sql injection
https://notcve.org/view.php?id=CVE-2024-6652
A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file manage_member.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. • https://github.com/littletree7/cve/issues/1 https://vuldb.com/?ctiid.271059 https://vuldb.com/?id.271059 https://vuldb.com/?submit.372193 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVE-2024-6041 – itsourcecode Gym Management System manage_user.php sql injection
https://notcve.org/view.php?id=CVE-2024-6041
A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. • https://github.com/ssiicckk/cve/issues/1 https://vuldb.com/?ctiid.268765 https://vuldb.com/?id.268765 https://vuldb.com/?submit.357816 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •