CVE-2025-3151: High SQL Injection in SourceCodester Gym Management
CVE-2025-3151 is a High SQL injection in Gym Management System via /signup.php. No fix is listed, so restrict access and use parameterized queries.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2025-3151 is a High SQL injection in Gym Management System via /signup.php. No fix is listed, so restrict access and use parameterized queries.
CVE-2025-31493 is a Critical path traversal in Kirby CMS when collection() gets a dynamic name. Update to 3.9.8.3, 3.10.1.2 or 4.7.1 or later.
CVE-2025-31477 is a Critical flaw in the Tauri shell plugin open endpoint that allows dangerous protocols. Update to 2.2.1 or restrict the endpoint.
CVE-2025-3147 is a High SQL injection in Boat Booking System via /add-subadmin.php. No fix is listed, so restrict access and use parameterized queries.
CVE-2025-3146 is a High SQL injection in Bus Pass Management System via /view-pass-detail.php. No fix is listed, so limit access and use bound queries.
CVE-2025-3141 is a Medium SQL injection in Online Medicine Ordering System via /manage_category.php. No fix listed, so restrict access and fix the query.
CVE-2025-3140 is a Medium SQL injection in Online Medicine Ordering System via /view_category.php. No fix is listed, so limit access and use bound queries.
CVE-2025-3138 is a High severity SQL injection in Online Security Guards Hiring System (edit-guard-detail.php). No fix listed; restrict access.
CVE-2025-3137 is a High SQL injection in PHPGurukul Guards Hiring System via /admin/changeimage.php. No fix listed, so restrict access and fix the query.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.