A vulnerability was found in Sinturno. It has been declared as critical. The affected element is the function modalReport_data of the file /_adm/scripts/modalReport_data.php of the component Parameter Handler. The manipulation of the argument client results in sql injection.

This vulnerability is reported as CVE-2025-41008. The attack can be launched remotely. No exploit exists.