CVE-2026-5206 | code-projects Simple Gym Management System 1.0 Payment sql injection

A vulnerability identified as critical has been detected in code-projects Simple Gym Management System 1.0. This vulnerability affects unknown code of the component Payment Handler. The manipulation of the argument Payment_id/Amount/customer_id/payment_type/customer_name leads to sql injection.

This vulnerability is referenced as CVE-2026-5206. Remote exploitation of the attack is possible. Furthermore, an exploit is available.