CVE-2025-8925: medium-severity vulnerability in itsourcecode Sports Management System
itsourcecode Sports Management System match.php sql injection
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.5%
A vulnerability has been found in itsourcecode Sports Management System 1.0. Affected is an unknown function of the file /Admin/match.php. The manipulation of the argument code leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
itsourcecode · Sports Management SystemRelated CVEs — itsourcecode Sports Management System
In the same product, most dangerous first.
CVE-2025-9766MEDIUMitsourcecode Sports Management System facilitator.php sql injectionEPSS 0.6%CVE-2025-9767MEDIUMitsourcecode Sports Management System sporttype.php sql injectionEPSS 0.5%CVE-2025-9768MEDIUMitsourcecode Sports Management System mode.php sql injectionEPSS 0.5%CVE-2025-9765MEDIUMitsourcecode Sports Management System tournament_details.php sql injectionEPSS 0.4%CVE-2025-9764MEDIUMitsourcecode Sports Management System resultdetails.php sql injectionEPSS 0.4%CVE-2025-9596MEDIUMitsourcecode Sports Management System login.php sql injectionEPSS 0.4%