Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-41008

SQL Injection in Sinturno

Description

SQL injection vulnerability in Sinturno. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'client' parameter in the '/_adm/scripts/modalReport_data.php' endpoint.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sinturno Sinturno

Default version status: unaffected

  • all versionsaffected

References