exito vulnerabilities

CVEs whose affected-version data names the exito package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-41018Critical· 9.8

11mo ago

SQL injection in Sergestec's Exito v8.0

SQL injection in Sergestec's Exito v8.0. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'cat' parameter in '/public.php'.

▾ Midnightsergestec · exitoEPSS 0.46%via NVD