Codezips Gym Management System SQL Injection Vulnerability in Update Plan Admin Dashboard

A critical SQL injection vulnerability has been identified in Codezips Gym Management System version 1.0. The issue arises in the file '/dashboard/admin/updateplan.php', where the 'planid' argument is improperly processed, allowing for SQL injection attacks to be executed remotely. This vulnerability has been publicly disclosed and is exploitable.

Impact

Exploitation of this vulnerability allows for SQL injection, where an attacker can manipulate database queries. This could lead to unauthorized data access, data manipulation, or in some cases, executing administrative operations on the database.