CVE-2025-41008

SQL Injection in Sinturno PUBLISHED

Description (CNA)

SQL injection vulnerability in Sinturno. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'client' parameter in the '/_adm/scripts/modalReport_data.php' endpoint.

Affected (CNA)

Vendor / product	Versions
Sinturno / Sinturno	affected all versions

CWE

CWE-89

References

https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-sinturno

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.