CVE-2025-14584: itsourcecode COVID Tracking System Admin Login login.php sql injection
A vulnerability has been found in itsourcecode COVID Tracking System 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14584?
CVE-2025-14584 has a high severity due to the potential for remote SQL injection attacks.
How do I fix CVE-2025-14584?
To fix CVE-2025-14584, sanitize and validate user input for the Username parameter to prevent SQL injection.
What software is affected by CVE-2025-14584?
CVE-2025-14584 affects the itsourcecode COVID Tracking System version 1.0.
What type of vulnerability is CVE-2025-14584?
CVE-2025-14584 is a SQL injection vulnerability occurring in the Admin Login component.
Can CVE-2025-14584 be exploited remotely?
Yes, CVE-2025-14584 can be exploited remotely by manipulating the Username argument.