Threats tagged 'ghsa-gcfw-6v54-vq4f'

CVE-2025-13568 is a SQL injection vulnerability in itsourcecode COVID Tracking System 1.0 affecting the /admin/?page=people endpoint. The flaw allows remote attackers with low privileges to manipulate the ID argument, potentially leading to unauthorized data access or modification. Exploit code has been published, but no confirmed exploitation in the wild is reported. The vulnerability has a medium severity rating with a CVSS score of 6.3.