CVE-2025-13569
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
A vulnerability in COVID Tracking System 1.0 affects the /admin/?page=city file. Manipulation of the ID argument leads to SQL injection. The attack can be launched remotely, and the exploit has been disclosed.
Risk Assessment
The risk includes potential unauthorized access to the database and possible data theft.
Recommendation
It is recommended to apply patches immediately and secure SQL query parameters.
Other vulnerabilities in COVID Tracking System
See all- CVE-2025-13570Medium
A vulnerability in COVID Tracking System 1.0 affects the /admin/?page=state file. Manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely, and the exploit has been made public.
- CVE-2025-13568Medium
A vulnerability in COVID Tracking System 1.0 affects the /admin/?page=people file. Manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely, and the exploit has been published.
- CVE-2025-13567Medium
A vulnerability was detected in itsourcecode COVID Tracking System 1.0 affecting an unknown function of the file /admin/?page=establishment. Manipulation of the ID argument results in SQL injection.
Original NVD description (English source)
A vulnerability has been found in itsourcecode COVID Tracking System 1.0. Affected is an unknown function of the file /admin/?page=city. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS