CVE-2025-12242 | CodeAstro Gym Management System 1.0 check-attendance.php ID sql injection

A vulnerability, which was classified as critical, was found in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/actions/check-attendance.php. Such manipulation of the argument ID leads to sql injection.

This vulnerability is uniquely identified as CVE-2025-12242. The attack can be launched remotely. Moreover, an exploit is present.