CVE-2025-10411: itsourcecode E-Logbook with Health Monitoring System for COVID-19 POST Request check_profile.php cross site scripting
A vulnerability was detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /stc-log-keeper/checkprofile.php of the component POST Request Handler. The manipulation of the argument profileid results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10411?
CVE-2025-10411 is considered a critical vulnerability due to the potential for unauthorized access and the manipulation of sensitive data.
How do I fix CVE-2025-10411?
To remediate CVE-2025-10411, it is recommended to validate and sanitize the input for the profile_id parameter in the check_profile.php file.
What systems are affected by CVE-2025-10411?
CVE-2025-10411 affects the itsourcecode E-Logbook with Health Monitoring System for COVID-19 version 1.0.
What type of vulnerability is CVE-2025-10411?
CVE-2025-10411 is an input validation vulnerability that can lead to unauthorized actions through manipulated POST requests.
Should I be concerned about CVE-2025-10411?
Yes, CVE-2025-10411 poses a significant security risk that could compromise the integrity and confidentiality of the affected application.