Skip to content
OpenAdvisories

Vendor

Sergestec

4 known vulnerabilities.

Products

Exito 2 SISTICK 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-41019

    SQL injection vulnerability in Sergestec's Exito

    SQL injection in Sergestec's SISTICK v7.2. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'id' parameter in '/index.php?view=ticket_detail'.

    Sergestec SISTICK
  • Critical 9.3
    CVE-2025-41018

    SQL injection vulnerability in Sergestec's Exito

    SQL injection in Sergestec's Exito v8.0. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'cat' parameter in '/public.php'.

    Sergestec Exito