CVE-2025-13570: itsourcecode COVID Tracking System page sql injection

Published Nov 23, 2025

Updated

A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/?page=state. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used.

Affected Software

2 affected components

itsourcecode COVID Tracking System

Angeljudesuarez Covid Tracking System=1.0

Event History

Nov 23, 2025

CVE Published

via MITRE·09:32 PM

Data Sourced

via MITRE·09:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-13570?

CVE-2025-13570 is considered a critical vulnerability due to its potential for remote SQL injection attacks.

How do I fix CVE-2025-13570?

To fix CVE-2025-13570, it is recommended to implement proper input validation and parameterized queries to prevent SQL injection.

What are the consequences of exploiting CVE-2025-13570?

Exploitation of CVE-2025-13570 can lead to unauthorized access to the database, data leakage, and potential loss of integrity of the application.

What versions of the software are affected by CVE-2025-13570?

CVE-2025-13570 affects version 1.0 of the itsourcecode COVID Tracking System.

Is CVE-2025-13570 a remote or local vulnerability?

CVE-2025-13570 is a remote vulnerability that can be exploited without physical access to the affected system.