VULNERABILITY INTELLIGENCE
CVE-2025-41019
EPSS probability0.38%
CISA KEVNot currently listed
Published2025-10-16
Last modified2026-10-08
Description
SQL injection in Sergestec's SISTICK v7.2. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'id' parameter in '/index.php?view=ticket_detail'.
Weakness classification
- cve-coordination@incibe.es: CWE-89