CVE-2025-14585: itsourcecode COVID Tracking System page sql injection
A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/?page=zone. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14585?
CVE-2025-14585 is classified as a critical vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-14585?
To fix CVE-2025-14585, validate and sanitize user inputs in the affected /admin/?page=zone file to prevent SQL injection.
What are the potential impacts of CVE-2025-14585?
The potential impacts of CVE-2025-14585 include unauthorized database access and the possibility of data manipulation or exfiltration.
Who is affected by CVE-2025-14585?
CVE-2025-14585 affects users of the itsourcecode COVID Tracking System version 1.0.
Can CVE-2025-14585 be exploited remotely?
Yes, CVE-2025-14585 can be exploited remotely, making it particularly dangerous for systems that expose the vulnerable endpoint.