EXPOSURES › CVE-2025-10851
CVE-2025-10851
HIGH
DETAIL
SourceNVD · cve
Published2025-09-23
CVSS7.3
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-10851 ↗
▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.
PLAYERS IMPLICATED
DESCRIPTION
A security flaw has been discovered in Campcodes Gym Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.