CVE-2025-9596: itsourcecode Sports Management System login.php sql injection
A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /login.php. This manipulation of the argument User causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9596?
CVE-2025-9596 is a high severity vulnerability due to its potential for remote SQL injection attacks.
How does CVE-2025-9596 occur?
CVE-2025-9596 occurs through unsanitized input into the /login.php file, specifically manipulating the User argument.
What software is affected by CVE-2025-9596?
CVE-2025-9596 affects the itsourcecode Sports Management System version 1.0.
How can I mitigate the risks associated with CVE-2025-9596?
To mitigate CVE-2025-9596, implement input validation and parameterized queries in the /login.php file.
Is it possible to exploit CVE-2025-9596 remotely?
Yes, CVE-2025-9596 can be exploited remotely, making it crucial to address it promptly.