CVE-2025-67285: SQL Injection
A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it directly in SQL queries without the need for appropriate cleaning or validation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-67285?
CVE-2025-67285 has been assigned a high severity rating due to its ability to allow SQL injection attacks.
How do I fix CVE-2025-67285?
To fix CVE-2025-67285, sanitize and validate all user inputs in the '/cts/admin/?page=zone' file to prevent SQL injection.
What software is affected by CVE-2025-67285?
CVE-2025-67285 affects the ITSourcecode COVID Tracking System Using QR-Code version 1.0.
Can CVE-2025-67285 lead to data breaches?
Yes, exploiting CVE-2025-67285 can potentially allow attackers to access sensitive data from the database.
How can I determine if my system is vulnerable to CVE-2025-67285?
You can determine if your system is vulnerable to CVE-2025-67285 by checking for unprotected input fields that interact with SQL queries in the affected software.