CVE-2025-60311

Description

ProjectWorlds Gym Management System1.0 is vulnerable to SQL Injection via the "id" parameter in the profile/edit.php page

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/projectworldsofficial/Gym-Management-System-Project-in-PHP ↗
• https://youtu.be/J_7G_AahgSw ↗
• https://github.com/ChuckBartowski7/Vulnerability-Research/blob/main/CVE-2025-60311/README.md ↗