CVE-2025-13567: itsourcecode COVID Tracking System page sql injection

Published Nov 23, 2025

Updated

A vulnerability was detected in itsourcecode COVID Tracking System 1.0. This affects an unknown function of the file /admin/?page=establishment. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.

Affected Software

2 affected components

itsourcecode COVID Tracking System=1.0

Angeljudesuarez Covid Tracking System=1.0

Event History

Nov 23, 2025

CVE Published

via MITRE·08:02 PM

Data Sourced

via MITRE·08:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-13567?

CVE-2025-13567 has a high severity rating due to its potential for remote SQL injection attacks.

How do I fix CVE-2025-13567?

To fix CVE-2025-13567, sanitize and validate input for the ID argument in the /admin/?page=establishment file to prevent SQL injection.

What software is affected by CVE-2025-13567?

CVE-2025-13567 affects version 1.0 of the itsourcecode COVID Tracking System.

Can CVE-2025-13567 be exploited remotely?

Yes, CVE-2025-13567 can be exploited remotely due to the SQL injection vulnerability.

What type of attack is associated with CVE-2025-13567?

CVE-2025-13567 is associated with SQL injection attacks that can manipulate the database through manipulated query arguments.