Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SQL injection vulnerability in Sinturno. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'client' parameter in the '/_adm/scripts/modalReport_data.php' endpoint.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2025-41008 SQL Injection in Sinturno Administrative Interface via Client Parameter https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-41008
Post summary
The text announces CVE-2025-41008, revealing a SQL injection vulnerability in Sinturno’s admin interface that can be triggered through a client parameter.
🚨 CVE-2025-41008: SQL Injection in Sinturno (CVSS:... No-auth SQL injection with full CRUD access through a single parameter - complete database takeover via `/_adm/scripts/... https://zerodaysignal.com/vulnerability/CVE-2025-41008 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
A newly disclosed no‑auth SQL injection vulnerability (CVE‑2025‑41008) in Sinturno permits full CRUD operations and complete database takeover, but no PoC, exploitation, or patch information is provided.
⚠️#INCIBEaviso | Inyección SQL en #Sinturno #CVE CVE-2025-41008 https://www.incibe.es/incibe-cert/alerta-temprana/avisos/inyeccion-sql-en-sinturno #AvisosDeSeguridad #TI #CNA
Post summary
The tweet alerts to a newly disclosed SQL injection vulnerability (CVE-2025-41008) affecting Sinturno, linking to an early warning notice from INCIBE.