CVE-2025-41019

SQL injection in Sergestec’s SISTICK v7.2. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the ‘id’ parameter in ‘/index.php?view=ticket_detail’.

More information : https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sergestec-products