CVE-2023-5185 (published 2023-09-28T20:52:35.938Z)
Gym Management System Project v1.0 is vulnerable to

an Insecure File Upload vulnerability on the 'file'

parameter of profile/i.php page, allowing an

authenticated attacker to obtain Remote Code Execution

on the server hosting the application.




Affected products: Vendor: Gym Management System Project
Product: Gym Management System Project
Versions: 1.0