CVE-2025-9768

itsourcecode Sports Management System mode.php sql injection

A vulnerability was identified in itsourcecode Sports Management System 1.0. This impacts an unknown function of the file /Admin/mode.php. The manipulation of the argument code leads to sql injection. The attack is possible to be carried out remotely. Eine Schwachstelle wurde in itsourcecode Sports Management System 1.0 gefunden. Es geht dabei um eine nicht klar definierte Funktion der Datei /Admin/mode.php. Die Veränderung des Parameters code resultiert in sql injection. Der Angriff kann über das Netzwerk passieren.

Affected

itsourcecode · Sports Management System

CVSS v4.0 VULDB

5.3 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 VULDB

6.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CVSS v2.0 VULDB

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

0.45% chance of exploitation in the next 30 days, 38th percentile

Published

2025-09-01

Updated

2025-09-02

Proof-of-concept exploits (1)

• hjsjbsg/record-for-own/issues/20★ · 2025-08-26

Security advisories

• https://vuldb.com/?id.322068
• https://vuldb.com/?submit.641753
• https://itsourcecode.com

References

• CVE Record
• NVD entry

Related

• CVE-2025-10062
• CVE-2025-9837
• CVE-2025-9840