https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-14667.htmlhttps://patchthecve.com/cve/CVE-2025-14667.htmlMon, 28 Sep 2026 10:10:00 +0000HIGH 7.3: A security vulnerability has been detected in itsourcecode COVID Tracking System 1.0. The impacted element is an unknown function of the file /admin/?page=system_info. Such manipulation of the argument meta_value leads to sql injection. The attack may be performed from remote. The exploit has been dhttps://patchthecve.com/cve/CVE-2025-14666.htmlhttps://patchthecve.com/cve/CVE-2025-14666.htmlMon, 28 Sep 2026 10:10:00 +0000HIGH 7.3: A weakness has been identified in itsourcecode COVID Tracking System 1.0. The affected element is an unknown function of the file /admin/?page=user. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been made availablehttps://patchthecve.com/cve/CVE-2025-14585.htmlhttps://patchthecve.com/cve/CVE-2025-14585.htmlWed, 07 Oct 2026 20:10:01 +0000HIGH 7.3: A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/?page=zone. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and couldhttps://patchthecve.com/cve/CVE-2025-14584.htmlhttps://patchthecve.com/cve/CVE-2025-14584.htmlWed, 07 Oct 2026 20:10:01 +0000HIGH 7.3: A vulnerability has been found in itsourcecode COVID Tracking System 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed https://patchthecve.com/cve/CVE-2025-13585.htmlhttps://patchthecve.com/cve/CVE-2025-13585.htmlThu, 08 Oct 2026 10:10:00 +0000HIGH 7.3: A vulnerability was detected in itsourcecode COVID Tracking System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument code results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.https://patchthecve.com/cve/CVE-2025-13570.htmlhttps://patchthecve.com/cve/CVE-2025-13570.htmlThu, 08 Oct 2026 10:10:00 +0000MEDIUM 6.3: A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/?page=state. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public https://patchthecve.com/cve/CVE-2025-13569.htmlhttps://patchthecve.com/cve/CVE-2025-13569.htmlThu, 08 Oct 2026 10:10:00 +0000MEDIUM 6.3: A vulnerability has been found in itsourcecode COVID Tracking System 1.0. Affected is an unknown function of the file /admin/?page=city. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.https://patchthecve.com/cve/CVE-2025-13568.htmlhttps://patchthecve.com/cve/CVE-2025-13568.htmlThu, 08 Oct 2026 10:10:00 +0000MEDIUM 6.3: A flaw has been found in itsourcecode COVID Tracking System 1.0. This impacts an unknown function of the file /admin/?page=people. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.https://patchthecve.com/cve/CVE-2025-13567.htmlhttps://patchthecve.com/cve/CVE-2025-13567.htmlThu, 08 Oct 2026 10:10:00 +0000MEDIUM 6.3: A vulnerability was detected in itsourcecode COVID Tracking System 1.0. This affects an unknown function of the file /admin/?page=establishment. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.