VYPR
← All advisories
Critical severityNVD Advisory· Published Mar 23, 2026· Updated May 19, 2026

CVE-2025-41008

CVE-2025-41008

Description

SQL injection vulnerability in Sinturno. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'client' parameter in the '/_adm/scripts/modalReport_data.php' endpoint.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Sinturno/Sinturnollm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: all versions

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.