Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-41019

SQL injection vulnerability in Sergestec's Exito

Description

SQL injection in Sergestec's SISTICK v7.2. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'id' parameter in '/index.php?view=ticket_detail'.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sergestec SISTICK

Default version status: unaffected

  • 7.2affected

References