CVE-2026-7716 MEDIUM

CVE-2026-7716: code-projects Gym Management System In PHP/Windows NT index.php sql injection

Vendor Code-Projects
Product Gym Management System In PHP
Weakness CWE-89 · SQLi
Published May 4, 2026
Last update May 4, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

Description

A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0. This vulnerability affects unknown code of the file /index.php. Performing a manipulation of the argument day results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.

Key dates

Disclosure timeline

May 4, 2026 CVE published
May 4, 2026 Record updated