CVE-2026-5206

A security vulnerability has been detected in code-projects Simple Gym Management System 1.0. This vulnerability affects unknown code of the component Payment Handler. The manipulation of the argument Payment_id/Amount/customer_id/payment_type/customer_name leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

Score

CVSS 3.1 6.3 Medium

Status

Deferred - cna@vuldb.com

Published

2026-03-31

Last modified

2026-04-01

Weaknesses

CWE-74, CWE-89

Affected products

• Simple Gym Management System (Code-projects)

References

• https://code-projects.org/
• https://github.com/maidangdang1/CVE/issues/5
• https://vuldb.com/submit/780406
• https://vuldb.com/vuln/354336
• https://vuldb.com/vuln/354336/cti