CVE-2026-5206
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
Mar 31, 2026
Vendor
unknown
Description
A security vulnerability has been detected in code-projects Simple Gym Management System 1.0. This vulnerability affects unknown code of the component Payment Handler. The manipulation of the argument Payment_id/Amount/customer_id/payment_type/customer_name leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.