CVE-2025-41008

Publication date

2026-03-23 12:59:02

Family

INCIBE

State

PUBLISHED

Description

SQL injection vulnerability in Sinturno. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the client parameter in the /_adm/scripts/modalReport_data.php endpoint.