CVE-2025-14667: itsourcecode COVID Tracking System page sql injection
A security vulnerability has been detected in itsourcecode COVID Tracking System 1.0. The impacted element is an unknown function of the file /admin/?page=systeminfo. Such manipulation of the argument metavalue leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14667?
CVE-2025-14667 is classified as a high severity vulnerability due to its potential for remote exploitation via SQL injection.
How do I fix CVE-2025-14667?
To fix CVE-2025-14667, validate and sanitize user inputs to prevent SQL injection, particularly in the /admin/?page=system_info function.
What does CVE-2025-14667 affect?
CVE-2025-14667 affects the itsourcecode COVID Tracking System version 1.0.
Can CVE-2025-14667 be exploited remotely?
Yes, CVE-2025-14667 can be exploited remotely through manipulating the meta_value argument.
What type of vulnerability is CVE-2025-14667?
CVE-2025-14667 is an SQL injection vulnerability, allowing attackers to execute arbitrary SQL queries.