A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it directly in SQL queries without the need for appropriate cleaning or validation.
References
| Link | Resource |
|---|---|
| https://github.com/bardminx/Lonlydance/issues/1 | Exploit Issue Tracking Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
02 Jan 2026, 17:46
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:angeljudesuarez:covid_tracking_system_using_qr-code:1.0:*:*:*:*:*:*:* | |
| First Time |
Angeljudesuarez covid Tracking System Using Qr-code
Angeljudesuarez |
|
| References | () https://github.com/bardminx/Lonlydance/issues/1 - Exploit, Issue Tracking, Third Party Advisory |
17 Dec 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-17 17:15
Updated : 2026-01-02 17:46
NVD link : CVE-2025-67285
Mitre link : CVE-2025-67285
CVE.ORG link : CVE-2025-67285
JSON object : View
Products Affected
angeljudesuarez
- covid_tracking_system_using_qr-code
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')