adrianmercurio CVE Vulnerabilities & Metrics

Focus on adrianmercurio vulnerabilities and metrics.

Last updated: 07 Jun 2025, 22:25 UTC

About adrianmercurio Security Exposure

This page consolidates all known Common Vulnerabilities and Exposures (CVEs) associated with adrianmercurio. We track both calendar-based metrics (using fixed periods) and rolling metrics (using gliding windows) to give you a comprehensive view of security trends and risk evolution. Use these insights to assess risk and plan your patching strategy.

For a broader perspective on cybersecurity threats, explore the comprehensive list of CVEs by vendor and product. Stay updated on critical vulnerabilities affecting major software and hardware providers.

Global CVE Overview

Total adrianmercurio CVEs: 21
Earliest CVE date: 17 Nov 2020, 21:15 UTC
Latest CVE date: 09 May 2025, 20:15 UTC

Latest CVE reference: CVE-2025-4488

Rolling Stats

30-day Count (Rolling): 10
365-day Count (Rolling): 19

Calendar-based Variation

Calendar-based Variation compares a fixed calendar period (e.g., this month versus the same month last year), while Rolling Growth Rate uses a continuous window (e.g., last 30 days versus the previous 30 days) to capture trends independent of calendar boundaries.

Variations & Growth

Month Variation (Calendar): 100.0%
Year Variation (Calendar): 0%

Month Growth Rate (30-day Rolling): 100.0%
Year Growth Rate (365-day Rolling): 0.0%

Monthly CVE Trends (current vs previous Year)

Annual CVE Trends (Last 20 Years)

Critical adrianmercurio CVEs (CVSS ≥ 9) Over 20 Years

CVSS Stats

Average CVSS: 7.2

Max CVSS: 7.5

Critical CVEs (≥9): 0

CVSS Range vs. Count

Range Count
0.0-3.9 0
4.0-6.9 4
7.0-8.9 17
9.0-10.0 0

CVSS Distribution Chart

Top 5 Highest CVSS adrianmercurio CVEs

These are the five CVEs with the highest CVSS scores for adrianmercurio, sorted by severity first and recency.

All CVEs for adrianmercurio

CVE-2025-4488 adrianmercurio vulnerability CVSS: 7.5 09 May 2025, 20:15 UTC

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_package. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-4487 adrianmercurio vulnerability CVSS: 7.5 09 May 2025, 20:15 UTC

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=delete_member. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-4486 adrianmercurio vulnerability CVSS: 7.5 09 May 2025, 20:15 UTC

A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=delete_plan. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-4485 adrianmercurio vulnerability CVSS: 7.5 09 May 2025, 19:16 UTC

A vulnerability has been found in itsourcecode Gym Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=delete_trainer. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-4484 adrianmercurio vulnerability CVSS: 7.5 09 May 2025, 19:16 UTC

A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. This affects an unknown part of the file /ajax.php?action=delete_user. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-4483 adrianmercurio vulnerability CVSS: 7.5 09 May 2025, 18:16 UTC

A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /view_pdetails.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-4466 adrianmercurio vulnerability CVSS: 7.5 09 May 2025, 06:15 UTC

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?action=save_payment. The manipulation of the argument registration_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-4465 adrianmercurio vulnerability CVSS: 7.5 09 May 2025, 06:15 UTC

A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_schedule. The manipulation of the argument member_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-4464 adrianmercurio vulnerability CVSS: 7.5 09 May 2025, 06:15 UTC

A vulnerability has been found in itsourcecode Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=save_plan. The manipulation of the argument plan leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-4463 adrianmercurio vulnerability CVSS: 7.5 09 May 2025, 05:15 UTC

A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. Affected is an unknown function of the file /ajax.php?action=save_package. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-4363 adrianmercurio vulnerability CVSS: 7.5 06 May 2025, 16:15 UTC

A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=end_membership. The manipulation of the argument rid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-4362 adrianmercurio vulnerability CVSS: 7.5 06 May 2025, 15:16 UTC

A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=save_membership. The manipulation of the argument member_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-4360 adrianmercurio vulnerability CVSS: 7.5 06 May 2025, 15:16 UTC

A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /view_member.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-4359 adrianmercurio vulnerability CVSS: 7.5 06 May 2025, 14:15 UTC

A vulnerability classified as critical was found in itsourcecode Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_member. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-4195 adrianmercurio vulnerability CVSS: 7.5 02 May 2025, 01:15 UTC

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /ajax.php?action=save_member. The manipulation of the argument umember_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-12784 adrianmercurio vulnerability CVSS: 6.5 19 Dec 2024, 14:15 UTC

A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been classified as critical. Affected is an unknown function of the file editbill.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-7794 adrianmercurio vulnerability CVSS: 6.5 14 Aug 2024, 21:15 UTC

A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file mybill.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-6652 adrianmercurio vulnerability CVSS: 6.5 10 Jul 2024, 23:15 UTC

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file manage_member.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271059.

CVE-2024-6218 adrianmercurio vulnerability CVSS: 7.5 21 Jun 2024, 02:15 UTC

A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. Affected by this issue is some unknown functionality of the file busprofile.php. The manipulation of the argument busid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-269282 is the identifier assigned to this vulnerability.

CVE-2020-29288 adrianmercurio vulnerability CVSS: 7.5 02 Dec 2020, 22:15 UTC

An SQL injection vulnerability was discovered in Gym Management System In manage_user.php file, GET parameter 'id' is vulnerable.

CVE-2020-28129 adrianmercurio vulnerability CVSS: 4.3 17 Nov 2020, 21:15 UTC

Stored Cross-site scripting (XSS) vulnerability in SourceCodester Gym Management System 1.0 allows users to inject and store arbitrary JavaScript code in index.php?page=packages via vulnerable fields 'Package Name' and 'Description'.