A vulnerability marked as critical has been reported in itsourcecode Sports Management System 1.0. This impacts an unknown function of the file /Admin/mode.php. The manipulation of the argument code leads to sql injection.

This vulnerability is uniquely identified as CVE-2025-9768. The attack is possible to be carried out remotely. No exploit exists.