CVE-2025-41019
SQL injection vulnerability in Sergestec's Exito
SQL injection in Sergestec's SISTICK v7.2. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'id' parameter in '/index.php?view=ticket_detail'.
CVSS 4.0 · 9.3 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products