CVE-2025-13422

creationtimestamp| type| source ---|---|--- 2025-11-20 00:17:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5zij6gvgk2k...

CVE-2025-13422

CVE-2025-13422 affects freeprojectscodes Sports Club Management System 1.0. The vulnerable element is an unknown function in /dashboard/admin/change_s_pwd.php where manipulating the login_id parameter triggers SQL injection. The vulnerability is remotely exploitable and the exploit is public. Doc...