CVE-2025-12261 | CodeAstro Gym Management System 1.0 remove-announcement.php ID sql injection

October 26, 2025 Yanac

A vulnerability was found in CodeAstro Gym Management System 1.0. It has been rated as critical. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing manipulation of the argument ID results in sql injection.

This vulnerability is identified as CVE-2025-12261. The attack can be initiated remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More