CVE-2025-9767: itsourcecode Sports Management System sporttype.php sql injection
A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /Admin/sporttype.php. Executing manipulation of the argument code can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9767?
CVE-2025-9767 has a high severity level due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-9767?
To fix CVE-2025-9767, sanitize and validate user inputs in the /Admin/sporttype.php file to prevent SQL injection.
What systems are affected by CVE-2025-9767?
CVE-2025-9767 affects the itsourcecode Sports Management System version 1.0.
Can CVE-2025-9767 be exploited remotely?
Yes, CVE-2025-9767 can be exploited remotely by manipulating the argument code in the vulnerable file.
What kind of attack is associated with CVE-2025-9767?
CVE-2025-9767 is associated with SQL injection attacks, which can compromise the database integrity.