CVE-2025-10411: itsourcecode E-Logbook with Health Monitoring System

Описание

Оригинално описание

A vulnerability was detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /stc-log-keeper/check_profile.php of the component POST Request Handler. The manipulation of the argument profile_id results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.

Засегнати продукти

• itsourcecode E-Logbook with Health Monitoring System for COVID-19: 1.0

Вид слабост

• CWE-79 XSS
• CWE-94 Неправилен контрол при генериране на код

История

Други уязвимости в itsourcecode E-Logbook with Health Monitoring System for COVID-19

• 7.3CVE-2026-3046
• 7.3CVE-2025-10670
• 5.3CVE-2025-10614
• 7.3CVE-2025-10118

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-10411
• https://nvd.nist.gov/vuln/detail/CVE-2025-10411
• https://vuldb.com/?id.323845
• https://vuldb.com/?ctiid.323845
• https://vuldb.com/?submit.646922
• https://github.com/yihaofuweng/cve/issues/21
• https://itsourcecode.com/