CVE-2025-10118: itsourcecode E-Logbook with Health Monitoring System

Описание

Оригинално описание

A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

Засегнати продукти

• itsourcecode E-Logbook with Health Monitoring System for COVID-19: 1.0

Вид слабост

• CWE-89 SQL инжекция
• CWE-74 Неправилна неутрализация на специални елементи в изходни данни

История

Други уязвимости в itsourcecode E-Logbook with Health Monitoring System for COVID-19

• 7.3CVE-2026-3046
• 7.3CVE-2025-10670
• 5.3CVE-2025-10614
• 5.3CVE-2025-10411

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-10118
• https://nvd.nist.gov/vuln/detail/CVE-2025-10118
• https://vuldb.com/?id.323088
• https://vuldb.com/?ctiid.323088
• https://vuldb.com/?submit.645615
• https://github.com/Ais0329/cve/issues/1
• https://itsourcecode.com/