CVE-2025-41019CWE-89sql-injection
CVE-2025-41019
published October 16, 2025
What it is
SQL injection in Sergestec's SISTICK v7.2. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'id' parameter in '/index.php?view=ticket_detail'.
The record
Technical detail
- CVSS
- 9.3 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.00381 · 30.9th percentile
- Weakness
- CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- Published
- 2025-10-16T12:15Z
References (1)
EPSS history
Timeline