SQL Injection Vulnerability in Winsure by SFS Consulting
CVE-2025-10610
9.8CRITICAL
Key Information:
- Status
- Vendor
- CVE Published:
- 14 October 2025
What is CVE-2025-10610?
A SQL Injection vulnerability exists in Winsure, a product by SFS Consulting Information Processing Industry and Foreign Trade Inc. This flaw allows attackers to execute arbitrary SQL commands, leading to unauthorized access and potential exposure of sensitive data. The vulnerability affects Winsure versions up to and including the one dated 21.08.2025, necessitating prompt remediation to safeguard against exploitation.
Affected Version(s)
Winsure 0