CVE-2025-2597

Name of the Vulnerable Software and Affected Versions ITIUM 6050 version 5.5.5.2-b3526

Description This issue allows an attacker to execute malicious Javascript code via GET and POST requests to the "/index.php" endpoint and inject code into the id session.

Recommendations For ITIUM 6050 version 5.5.5.2-b3526, consider restricting access to the "/index.php" endpoint until a patch is available. As a temporary workaround, avoid using the id session variable in the affected endpoint to minimize the risk of exploitation.