A vulnerability classified as critical has been found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing manipulation of the argument id/ini_weight results in sql injection.
This vulnerability was named CVE-2025-12609. The attack may be initiated remotely. In addition, an exploit is available.
