What is CVE-2025-67285?

CVE-2025-67285 is a high-severity vulnerability in Angeljudesuarez Covid Tracking System Using Qr-Code, classified under SQL Injection. CVSS score: 7.3/10. Published 2025-12-17.

How severe is CVE-2025-67285?

High severity. CVSS v3 base score is 7.3 out of 10.

SQL Injection in Angeljudesuarez Covid Tracking System Using Qr-Code

CVE-2025-67285

A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it directly in SQL queries without the need for appropriate cleaning or validation.

Vulnerability class: SQL Injection

EPSS: 0.002 (7.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

Affected products

Angeljudesuarez Covid_tracking_system_using_qr-code — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Exploit, Third Party Advisory, Issue Tracking)

Frequently asked questions

What is CVE-2025-67285?: CVE-2025-67285 is a high-severity vulnerability in Angeljudesuarez Covid Tracking System Using Qr-Code, classified under SQL Injection. CVSS score: 7.3/10. Published 2025-12-17.
How severe is CVE-2025-67285?: High severity. CVSS v3 base score is 7.3 out of 10.