CVE-2025-4784CWE-89

SQLi in Moderec's Tourtella

Critical · published July 24, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

🚨 A SQL injection vulnerability in Moderec Tourtella can turn a simple query into an attacker's playground! 🔥 Think of this like a restaurant where a sneaky diner can change their order without the kitchen checking — they could ask for anything, even items that shouldn't be on the menu! An attacker could exploit this flaw to manipulate the database, potentially accessing sensitive information, altering data, or even deleting crucial records. The consequences could be absolutely devastating, leading to data breaches and significant operational disruption.

Put simply

Think of this like a restaurant where a sneaky diner can change their order without the kitchen checking — they could ask for anything, even items that shouldn't be on the menu! This vulnerability allows attackers to inject malicious SQL commands through user input, which the system improperly neutralizes, enabling unauthorized access to the database.

What to do

An attacker could exploit this flaw to manipulate the database, potentially accessing sensitive information, altering data, or even deleting crucial records. The consequences could be absolutely devastating, leading to data breaches and significant operational disruption. To protect your system, patch Moderec Tourtella to version 26.05.2025 or later immediately. Additionally, ensure all user inputs are properly sanitized to prevent SQL injection. Regularly review access controls and database queries as an added precaution. You've got this! By following these steps, you can transform your system into a security fortress! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00554 · 45.5th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2025-07-24T13:27Z
EPSS history
Timeline
  • 24 JUL 13:27Z
    SQLi in Moderec's Tourtella
    cvelistv5