Freeprojectscodes vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Freeprojectscodes products: 1 record(s), with severity, exploitation and fixes.

Sports Club Management System 1

Exploited only (KEV) →

CVE-2025-13422 Critical · 9.8 CWE-89 Nov 19, 2025

freeprojectscodes Sports Club Management System change_s_pwd.php sql injection

A vulnerability was detected in freeprojectscodes Sports Club Management System 1.0. The affected element is an unknown function of the file /dashboard/admin/change_s_pwd.php. Performing manipulation of the argument login_id results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.