CVE-2025-8925: fallo de gravedad media en itsourcecode Sports Management System
itsourcecode Sports Management System match.php sql injection
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.9epss 0.5%
A vulnerability has been found in itsourcecode Sports Management System 1.0. Affected is an unknown function of the file /Admin/match.php. The manipulation of the argument code leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
itsourcecode · Sports Management SystemCVEs relacionadas — itsourcecode Sports Management System
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-9766MEDIUMitsourcecode Sports Management System facilitator.php sql injectionEPSS 0.6%CVE-2025-9767MEDIUMitsourcecode Sports Management System sporttype.php sql injectionEPSS 0.5%CVE-2025-9768MEDIUMitsourcecode Sports Management System mode.php sql injectionEPSS 0.5%CVE-2025-9765MEDIUMitsourcecode Sports Management System tournament_details.php sql injectionEPSS 0.4%CVE-2025-9764MEDIUMitsourcecode Sports Management System resultdetails.php sql injectionEPSS 0.4%CVE-2025-9596MEDIUMitsourcecode Sports Management System login.php sql injectionEPSS 0.4%