CVE-2025-41377 — SQL injection vulnerability in Gandia Integra Total

CVE-2025-41377

SQL injection vulnerability in Gandia Integra Total PUBLISHED

Description (CNA)

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encuestas/integraweb[_v4]/integra/html/view/consultacuotasred.php.

Affected (CNA)

Vendor / product	Versions
TESI / Gandia Integra Total	affected 2.1.2217.3 before 4.4.2236.1

CWE

CWE-89

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-gandia-integra-total-tesi

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.