CVE-2025-10610

CriticalCVSS 9.8/10Last modified Oct 8, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SFS Consulting Information Processing Industry and Foreign Trade Inc. Winsure allows Blind SQL Injection.

This issue affects Winsure: through Version dated 21.08.2025.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Oct 14, 2025
Last modified: Oct 8, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-106119.8Due to an insufficient access control implementation in multiple WSO2 Products, authentication and authorization checks for certain REST API CVE-2025-106126.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in giSoft Information Technologies CVE-2025-106138.8A vulnerability has been found in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /leve CVE-2025-106146.1A vulnerability was determined in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0 on COVID. This affects an unknown fu CVE-2025-106158.8A vulnerability was identified in itsourcecode E-Commerce Website 1.0. This impacts an unknown function of the file /admin/products.php. The CVE-2025-106168.8A security flaw has been discovered in itsourcecode E-Commerce Website 1.0. Affected is an unknown function of the file /admin/users.php. Th CVE-2025-106178.8A weakness has been identified in SourceCodester Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of th CVE-2025-106188.8A security vulnerability has been detected in itsourcecode Online Clinic Management System 1.0. Affected by this issue is some unknown funct CVE-2025-106196.3A vulnerability was detected in sequa-ai sequa-mcp up to 1.0.13. This affects the function redirectToAuthorization of the file src/helpers/n CVE-2025-10623.5The Slider, Gallery, and Carousel by MetaSlider WordPress plugin before 3.95.0 does not sanitise and escape some of its settings, which cou CVE-2025-106208.8A flaw has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file /editp2.php. CVE-2025-106219.8A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editr