SQL Injection Vulnerability in ITSourcecode COVID Tracking System
CVE-2025-67285

7.3HIGH

Key Information:

Vendor: ITSourcecode
Status: COVID Tracking System Using QR-Code
Vendor: CVE Published:; 17 December 2025

🔔 Create ITSourcecode Vulnerability Alert

What is CVE-2025-67285?

A SQL injection vulnerability exists in the '/cts/admin/?page=zone' file of the ITSourcecode COVID Tracking System Using QR-Code v1.0. This issue arises when attackers exploit the 'id' parameter to inject malicious SQL code, which is executed directly in the database without proper input validation and sanitization. This flaw puts sensitive data at risk and can lead to unauthorized database modifications or data breaches.

References

https://github.com/bardminx/Lonlydance/issues/1

CVSS V3.1

Score:

7.3

Severity:

HIGH

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 17, 2025
Vulnerability Reserved
Dec 8, 2025

JSON