CVE-2023-37068 | BDVDB-2026-209196 Detail

Description#

Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username and password fields, enabling SQL Injection attacks.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/Mr-Secure-Code/My-CVE/blob/main/CVE-2023-37068-Exploit.md
https://github.com/riteshs4hu/My-CVE/blob/main/CVE-2023-37068-Exploit.md

Exploit#

No public exploit known

History#

Version 12023-08-09Record published in the CVE List.
Version 22024-10-10Most recent update recorded in the CVE List.