Beveiligingsadvies

CVE-2025-41370

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-01 12:28:12

Laatst bijgewerkt 2025-08-01 13:43:27

Toegewezen door INCIBE

CVSS-score 9.3

Status PUBLISHED

Beschrijving

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encuestas/integraweb/html/view/acceso.php.

← Alle CVE's bekijken Bekijk op cve.org ↗