A vulnerability labeled as critical has been found in MyClub 0.5. Affected by this issue is some unknown functionality of the file /articles of the component GET Request Handler. The manipulation of the argument Content/GroupName/PersonName/lastUpdate/pool/title results in sql injection.
This vulnerability is known as CVE-2025-57423. It is possible to launch the attack remotely. No exploit is available.