CVE 6.9 MEDIUM

itsourcecode Sports Management System login.php sql injection_CVE-2025-9596

6.9 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /login.php. This manipulation of the argument User causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

Basic Information

ID CVE-2025-9596
Source VulDB
Published Aug 28, 2025 at 23:32

Affected Product

Vendor itsourcecode
Product Sports Management System
Version 1.0
Affected Versions itsourcecode Sports Management System 1.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.