CVE-2025-67285High· 7.3▾ TwilightA SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it di…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it directly in SQL queries without the need for appropriate cleaning or validation.
covid_tracking_system_using_qr-code = 1.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-13585High· 7.3A vulnerability was detected in itsourcecode COVID Tracking System 1.0
CVE-2025-13570Medium· 6.3A vulnerability was found in itsourcecode COVID Tracking System 1.0
CVE-2025-13569Medium· 6.3A vulnerability has been found in itsourcecode COVID Tracking System 1.0
CVE-2025-13568Medium· 6.3A flaw has been found in itsourcecode COVID Tracking System 1.0
CVE-2025-13287Medium· 6.3A weakness has been identified in itsourcecode Online Voting System 1.0
CVE-2025-13286Medium· 6.3A security flaw has been discovered in itsourcecode Online Voting System 1.0