PT-2025-35468 · Itsourcecode · Sports Club Management System

Huayer

·

CVE-2025-9768

·

Published

2025-09-01

·

Updated

2025-09-01

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions itsourcecode Sports Management System version 1.0
Description A vulnerability exists in itsourcecode Sports Management System 1.0. The manipulation of the code argument in the file /Admin/mode.php can lead to SQL injection. The attack can be carried out remotely.
Recommendations As a temporary workaround, consider restricting access to the file /Admin/mode.php until a fix is available. Sanitize the code argument before using it in any database queries.

Exploit

Fix

SQL injection

Special Elements Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-89CWE-74

Related Identifiers

CVE-2025-9768

Affected Products

Sports Club Management System