---
id: CVE-2025-67285
title: >-
  A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of
  ITSourcecode COVID Tracking System Using QR-Code v1.0
summary: >-
  A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of
  ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this
  issue is that attackers inject malicious code from the parameter 'id' and use
  it di…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-89
vendor: angeljudesuarez
product: covid_tracking_system_using_qr-code
affected:
  - covid_tracking_system_using_qr-code = 1.0
published: '2025-12-17'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T11:10:00.203'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-67285'
references:
  - url: 'https://github.com/bardminx/Lonlydance/issues/1'
    label: cve@mitre.org
tags:
  - nvd
epss: 0.00203
epssPercentile: 0.09425
ingestedAt: '2026-10-13T11:23:51.120Z'
---

## Overview

A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it directly in SQL queries without the need for appropriate cleaning or validation.

## Affected

- `covid_tracking_system_using_qr-code = 1.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.