A vulnerability was found in CodeAstro Gym Management System 1.0 and classified as critical. This affects an unknown part of the file /admin/edit-equipmentform.php. The manipulation of the argument ID results in sql injection.

This vulnerability is reported as CVE-2025-11592. The attack can be launched remotely. Moreover, an exploit is present.