Security Advisory

CVE-2026-5206

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-31 17:30:13
Last updated 2026-04-01 13:57:53
Assigner VulDB
State PUBLISHED

Description

A security vulnerability has been detected in code-projects Simple Gym Management System 1.0. This vulnerability affects unknown code of the component Payment Handler. The manipulation of the argument Payment_id/Amount/customer_id/payment_type/customer_name leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.