Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
•added 2025/10/17 8:40 a.m.•24 views

CVE-2025-41019

SQL injection in Sergestec's SISTICK v7.2. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'id' parameter in '/index.php?view=ticketdetail'...

9.3CVSS5.9AI score0.00381EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/16 8:15 a.m.•19 views

CVE-2025-41019

SQL injection in Sergestec's SISTICK v7.2. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'id' parameter in '/index.php?view=ticketdetail'...

9.3CVSS0.00381EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/16 12:00 a.m.•11 views

Sergestec SISTICK SQL注入漏洞

Sergestec SISTICK is an enterprise business management platform from Sergestec. A SQL injection vulnerability exists in Sergestec SISTICK v7.2, which stems from incorrect manipulation of the parameter id in the file /index.php?view=ticketdetail, which could lead to a SQL injection attack...

9.3CVSS5.7AI score0.00381EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/16 12:00 a.m.•3 views

PT-2025-42434

Name of the Vulnerable Software and Affected Versions Sergestec SISTICK version 7.2 Description A SQL injection issue exists in Sergestec's SISTICK version 7.2. This allows an attacker to retrieve, create, update, and delete databases. The issue is located in the 'id' parameter within the...

9.3CVSS5.9AI score0.00381EPSS
SaveExploits0References7
Rows per page
Query Builder