CVE-2025-13568
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
A vulnerability in COVID Tracking System 1.0 affects the /admin/?page=people file. Manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely, and the exploit has been published.
Risk Assessment
The risk includes unauthorized access to personal data, potentially leading to privacy breaches.
Recommendation
It is recommended to update the system and implement mechanisms to prevent SQL injection.
Other vulnerabilities in COVID Tracking System
See all- CVE-2025-13570Medium
A vulnerability in COVID Tracking System 1.0 affects the /admin/?page=state file. Manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely, and the exploit has been made public.
- CVE-2025-13569Medium
A vulnerability in COVID Tracking System 1.0 affects the /admin/?page=city file. Manipulation of the ID argument leads to SQL injection. The attack can be launched remotely, and the exploit has been disclosed.
- CVE-2025-13567Medium
A vulnerability was detected in itsourcecode COVID Tracking System 1.0 affecting an unknown function of the file /admin/?page=establishment. Manipulation of the ID argument results in SQL injection.
Original NVD description (English source)
A flaw has been found in itsourcecode COVID Tracking System 1.0. This impacts an unknown function of the file /admin/?page=people. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS