CVE-2025-40712 SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the idconcesion parameter in /FacturaE/DescargarFactura...

CVE-2025-40711

CVE-2025-40711 affects Quiter Gateway, vulnerable in versions prior to 4.7.0. The flaw allows an attacker to manipulate the id_concesion parameter in the endpoint /FacturaE/VerFacturaPDF to retrieve, create, update, and delete databases. Public references confirm SQL injection in Quiter Gateway b...

PT-2010-5313 · Ibm +1 · Ibm Tivoli Provisioning Manager For Os Deployment +1

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Provisioning Manager for OS Deployment version 7.1.1.3 Description: The TCP-to-ODBC gateway does not require authentication for SQL statements, allowing remote attackers to modify, create, or read database records via a session on...