CVE-2025-41374 SQL injection vulnerability in Gandia Integra Total

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...

CVE-2025-41374

CVE-2025-41374 affects Gandia Integra Total TESI (versions 2.1.2217.3 through 4.4.2236.1). The vulnerability resides in the idestudio parameter of /encuestas/integraweb[_v4]/integra/html/view/hislistadoacciones.php, allowing an authenticated attacker to retrieve, create, update, and delete databa...

CVE-2025-41373 SQL injection vulnerability in Gandia Integra Total

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...

CVE-2025-41373 SQL injection vulnerability in Gandia Integra Total

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...

CVE-2025-41373

CVE-2025-41373 is a SQL injection affecting Gandia Integra Total (TESI) versions 2.1.2217.3 through 4.4.2236.1. The vulnerability arises from the idestudio parameter being concatenated directly into an SQL query in /encuestas/integraweb_v4/integra/html/view/hislistadoacciones.php, allowing an aut...

CVE-2025-41372

CVE-2025-41372 affects Gandia Integra Total, versions 2.1.2217.3 through 4.4.2236.1. The vulnerability is a SQL injection in the idestudio parameter of the endpoint /encuestas/integraweb[_v4]/integra/html/view/informe_campo_entrevistas.php, exploitable by an authenticated attacker to retrieve, cr...

CVE-2025-41372 SQL injection vulnerability in Gandia Integra Total

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...

CVE-2025-41372 SQL injection vulnerability in Gandia Integra Total

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...

CVE-2025-41371 SQL injection vulnerability in Gandia Integra Total

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...

CVE-2025-41371 SQL injection vulnerability in Gandia Integra Total

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...

CVE-2025-41371

Gandia Integra Total (TESI) affected versions 2.1.2217.3 through 4.4.2236.1 have a SQL injection in the idestudio parameter of the endpoint /encuestas/integraweb_v4/integra/html/view/acceso.php. An authenticated attacker could retrieve, create, update, or delete databases via this parameter. The ...

CVE-2025-41370 SQL injection vulnerability in Gandia Integra Total

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encuestas/integraweb/html/view/acceso.php...

PT-2025-31634 · Unknown · Gandia Integra Total

Name of the Vulnerable Software and Affected Versions: Gandia Integra Total versions 2.1.2217.3 through 4.4.2236.1 Description: A SQL injection vulnerability exists in Gandia Integra Total. The vulnerability allows an authenticated attacker to retrieve, create, update, and delete databases throug...

PT-2025-31632 · Gandia · Gandia Integra Total Tesi

Name of the Vulnerable Software and Affected Versions: Gandia Integra Total TESI versions 2.1.2217.3 through 4.4.2236.1 Description: A SQL injection vulnerability exists in Gandia Integra Total TESI. The vulnerability allows an authenticated attacker to retrieve, create, update, and delete...

PT-2025-31633 · Unknown · Gandia Integra Total

Name of the Vulnerable Software and Affected Versions: Gandia Integra Total versions 2.1.2217.3 through 4.4.2236.1 Description: A SQL injection vulnerability exists in Gandia Integra Total. The vulnerability allows an authenticated attacker to retrieve, create, update, and delete databases throug...

PT-2025-31637

Name of the Vulnerable Software and Affected Versions Gandia Integra Total versions 2.1.2217.3 through 4.4.2236.1 Description A SQL injection vulnerability exists in Gandia Integra Total. The vulnerability allows an authenticated attacker to retrieve, create, update, and delete databases through...

PT-2025-31636 · Gandia · Gandia Integra Total Tesi

Name of the Vulnerable Software and Affected Versions: Gandia Integra Total TESI versions 2.1.2217.3 through 4.4.2236.1 Description: A SQL injection vulnerability exists in Gandia Integra Total TESI. The vulnerability allows an authenticated attacker to retrieve, create, update, and delete...

PT-2025-31638 · Unknown · Gandia Integra Total

Name of the Vulnerable Software and Affected Versions: Gandia Integra Total versions 2.1.2217.3 through 4.4.2236.1 Description: A SQL injection issue exists in Gandia Integra Total. An authenticated attacker can retrieve, create, update, and delete databases through the idestudio parameter in the...

PT-2025-31689 · Zpanel · Zpanel

Name of the Vulnerable Software and Affected Versions: ZPanel version 10.0.0.2 Description: A remote command execution issue exists in the htpasswd module. The inHTUsername field, when creating .htaccess files, is passed to a system call without proper sanitization, which invokes the system’s...

PT-2025-31635 · Tesi · Gandia Integra Total

Name of the Vulnerable Software and Affected Versions: Gandia Integra Total versions 2.1.2217.3 through 4.4.2236.1 Description: A SQL injection vulnerability exists in Gandia Integra Total of TESI. The vulnerability allows an authenticated attacker to retrieve, create, update, and delete database...