CVE-2025-8986

A vulnerability was determined in SourceCodester COVID 19 Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
References
Link Resource
https://github.com/zhuyi-hz/cve/issues/5 Exploit Issue Tracking Third Party Advisory
https://vuldb.com/?ctiid.319982 Permissions Required VDB Entry
https://vuldb.com/?id.319982 Third Party Advisory VDB Entry
https://vuldb.com/?submit.628663 Third Party Advisory VDB Entry
https://www.sourcecodester.com/ Product
https://github.com/zhuyi-hz/cve/issues/5 Exploit Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:unyasoft:covid19_testing_management_system:1.0:*:*:*:*:*:*:*

History

18 Aug 2025, 15:12

Type Values Removed Values Added
CPE cpe:2.3:a:unyasoft:covid19_testing_management_system:1.0:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
First Time Unyasoft covid19 Testing Management System
Unyasoft
References () https://www.sourcecodester.com/ - () https://www.sourcecodester.com/ - Product
References () https://vuldb.com/?ctiid.319982 - () https://vuldb.com/?ctiid.319982 - Permissions Required, VDB Entry
References () https://github.com/zhuyi-hz/cve/issues/5 - () https://github.com/zhuyi-hz/cve/issues/5 - Exploit, Issue Tracking, Third Party Advisory
References () https://vuldb.com/?submit.628663 - () https://vuldb.com/?submit.628663 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?id.319982 - () https://vuldb.com/?id.319982 - Third Party Advisory, VDB Entry

15 Aug 2025, 13:15

Type Values Removed Values Added
CWE CWE-89
CWE-74
CVSS v2 : unknown
v3 : 7.3
v2 : unknown
v3 : unknown

14 Aug 2025, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-08-14 22:15

Updated : 2025-08-18 15:12


NVD link : CVE-2025-8986

Mitre link : CVE-2025-8986


JSON object : View

Products Affected

unyasoft

  • covid19_testing_management_system
CWE

No CWE.