SQL Injection Vulnerability in ITSourcecode COVID Tracking System
CVE-2025-67285
7.3HIGH
What is CVE-2025-67285?
A SQL injection vulnerability exists in the '/cts/admin/?page=zone' file of the ITSourcecode COVID Tracking System Using QR-Code v1.0. This issue arises when attackers exploit the 'id' parameter to inject malicious SQL code, which is executed directly in the database without proper input validation and sanitization. This flaw puts sensitive data at risk and can lead to unauthorized database modifications or data breaches.
References
CVSS V3.1
Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved