CVE-2025-10670: itsourcecode E-Logbook with Health Monitoring System for COVID-19 check_profile.php sql injection
A flaw has been found in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /checkprofile.php. Executing manipulation of the argument profileid can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10670?
CVE-2025-10670 is classified as a high severity vulnerability due to the potential for SQL injection exploitation.
How do I fix CVE-2025-10670?
To fix CVE-2025-10670, implement input validation and parameterized queries for the profile_id argument in the check_profile.php file.
What is the impact of exploiting CVE-2025-10670?
Exploiting CVE-2025-10670 could allow attackers to execute arbitrary SQL queries, potentially compromising the database.
Which versions of the software are affected by CVE-2025-10670?
CVE-2025-10670 affects version 1.0 of the itsourcecode E-Logbook with Health Monitoring System for COVID-19.
Is there a known exploit for CVE-2025-10670?
As of now, there are no publicly known exploits specifically targeting CVE-2025-10670, but the vulnerability's nature poses a significant risk.