Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-41008 EUVD-2025-208935GHSA-8wgh-35g5-cg6v

SQL Injection in Sinturno

Published Mar 23, 2026 · Updated Mar 23, 2026 · Assigned by INCIBE

Description

SQL injection vulnerability in Sinturno. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'client' parameter in the '/_adm/scripts/modalReport_data.php' endpoint.

Affected products

VendorProductAffectedFixed
Sinturno Sinturno all versions —

References