CVE-2025-14585

A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/?page=zone. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.

• CWE-74
• CWE-89
• CWE-89

• https://github.com/Ggeee3/CVE/issues/1Exploit, Issue Tracking, Third Party Advisory
• https://itsourcecode.com/Product
• https://vuldb.com/?ctiid.336205Permissions Required, VDB Entry
• https://vuldb.com/?id.336205Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.705535Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.706053Third Party Advisory, VDB Entry

Published

Dec 12, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-1458The Element Pack Addons for Elementor – Free Templates and W…5.4
• CVE-2025-14580A security vulnerability has been detected in Qualitor up to…6.1
• CVE-2025-14581The HAPPY – Helpdesk Support Ticket System plugin for WordPr…4.3
• CVE-2025-14582A vulnerability was detected in campcodes Online Student Enr…7.2
• CVE-2025-14583A flaw has been found in campcodes Online Student Enrollment…9.8
• CVE-2025-14584A vulnerability has been found in itsourcecode COVID Trackin…9.8
• CVE-2025-14586A vulnerability was determined in TOTOLINK X5000R 9.1.0cu.20…9.8
• CVE-2025-14587A vulnerability was identified in itsourcecode Online Pet Sh…9.8
• CVE-2025-14588A security flaw has been discovered in itsourcecode Student …9.8
• CVE-2025-14589A weakness has been identified in code-projects Prison Manag…8.8
• CVE-2025-1459The Page Builder by SiteOrigin plugin for WordPress is vulne…5.4
• CVE-2025-14590A security vulnerability has been detected in code-projects …9.8