CNNVD-202510-2396 Information
Oct 16, 2025
cve
CNNVD ID
CNNVD-202510-2396
Related CVE
- CNNVD Published: 2025-10-16
Description (Chinese)
Sergestec Exito是Sergestec公司的一个销售平台。 Sergestec Exito 8.0版本存在SQL注入漏洞，该漏洞源于对文件/public.php中参数cat的错误操作，可能导致SQL注入攻击。
Description (English)
Sergei Exito is a sales platform for Sergei. Version 8.0 of Sergei Exito has an injection loophole in SQL, which is the result of a mishandling of the parameter cat in document/public.php, which could lead to an attack on SQL.
Hazard Level
High
Vulnerability Type
SQL注入
Affected Vendor
Sergestec
Published
2025-10-16
Last Modified
2026-02-24
References
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sergestec-products
Share on: