CVE-2025-9840: itsourcecode Sports Management System gametype.php sql injection
A weakness has been identified in itsourcecode Sports Management System 1.0. The impacted element is an unknown function of the file /Admin/gametype.php. Executing manipulation of the argument code can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9840?
CVE-2025-9840 has been classified as a critical SQL injection vulnerability.
How do I fix CVE-2025-9840?
To fix CVE-2025-9840, sanitize user inputs and implement prepared statements to prevent SQL injection.
What systems are affected by CVE-2025-9840?
CVE-2025-9840 affects itsourcecode Sports Management System version 1.0.
Can CVE-2025-9840 be exploited remotely?
Yes, CVE-2025-9840 can be exploited remotely, allowing attackers to manipulate SQL queries.
What is the impact of exploiting CVE-2025-9840?
Exploiting CVE-2025-9840 can lead to unauthorized access to the database and potential data compromise.