CVE-2025-9768: itsourcecode Sports Management System mode.php sql injection
A vulnerability was identified in itsourcecode Sports Management System 1.0. This impacts an unknown function of the file /Admin/mode.php. The manipulation of the argument code leads to sql injection. The attack is possible to be carried out remotely.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9768?
CVE-2025-9768 has been classified with a critical severity due to its potential for unauthenticated remote SQL injection.
How do I fix CVE-2025-9768?
To fix CVE-2025-9768, validate and sanitize user inputs in the /Admin/mode.php file to prevent SQL injection.
What are the potential impacts of CVE-2025-9768 on my system?
The exploitation of CVE-2025-9768 could allow an attacker to manipulate database queries, leading to unauthorized access to sensitive data.
Is CVE-2025-9768 easily exploitable?
Yes, CVE-2025-9768 can be easily exploited remotely, making it a significant threat to systems using the affected version.
Which versions of the Sports Management System are affected by CVE-2025-9768?
CVE-2025-9768 affects the itsourcecode Sports Management System version 1.0.