CVE-2023-37068

CriticalCVSS 9.8

Published: 09/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.88%

54th percentile - higher than 54% of all known CVEs

Summary

Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and potential data manipulation.

Risk Assessment

This vulnerability poses a risk of unauthorized data access and manipulation, which can lead to serious consequences for the organization.

Recommendation

It is recommended to implement proper input validation mechanisms and protections against SQL Injection attacks in the login form.

Original NVD description (English source)

Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username and password fields, enabling SQL Injection attacks.