CVE-2025-13422 | freeprojectscodes Sports Club Management System 1.0 change_s_pwd.php login_id sql injection

November 19, 2025 Yanac

A vulnerability identified as critical has been detected in freeprojectscodes Sports Club Management System 1.0. The affected element is an unknown function of the file /dashboard/admin/change_s_pwd.php. Performing manipulation of the argument login_id results in sql injection.

This vulnerability was named CVE-2025-13422. The attack may be initiated remotely. In addition, an exploit is available.VulDB Recent EntriesRead More