Codezips Gym Management System SQL Injection Vulnerability

A critical SQL injection vulnerability has been identified in Codezips Gym Management System version 1.0. The issue resides in the file '/dashboard/admin/del_plan.php', specifically within the 'name' parameter. This vulnerability allows remote attackers to inject arbitrary SQL code, bypassing input validation. Exploitation of this vulnerability could lead to unauthorized database access, data manipulation, and potentially a full system compromise.

Impact

Exploitation of this vulnerability could result in a database compromise, allowing attackers to read, modify, or delete data. Additionally, there is a risk of data leakage, with sensitive customer or payment information potentially being exposed.