Unrated severityNVD Advisory· Published Oct 16, 2025· Updated Oct 16, 2025
SQL injection vulnerability in Sergestec's Exito
CVE-2025-41018
Description
SQL injection in Sergestec's Exito v8.0. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'cat' parameter in '/public.php'.
Affected products
2- Sergestec/Exitov5Range: 8.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.