2025-10-16 · 2 min · BitNinja Team

SQL Injection Vulnerability Alert for Hosting Providers

The recent identification of CVE-2025-41019 reveals a critical SQL injection vulnerability in Sergestec's SISTICK v7.2. This vulnerability allows attackers to gain unauthorized access to databases through the 'id' parameter in the URL. System administrators, hosting providers,...