CVE-2025-40716 SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the suceso.contenido mensaje in /QMSCliente/Sucesos.action...

CVE-2025-40716

CVE-2025-40716 is a SQL injection in Quiter Gateway prior to v4.7.0, exploitable via the suceso.contenido mensaje parameter in /QMSCliente/Sucesos.action. The flaw enables an attacker to retrieve, create, update and delete databases through that endpoint. Affected product: Quiter Gateway; vulnera...

CVE-2025-40715

The CVE-2025-40715 entry describes a SQL injection vulnerability in Quiter Gateway (versions prior to 4.7.0). The issue arises in the mensaje parameter of the /QISClient/api/v1/sucesospaginas endpoint, enabling an attacker to retrieve, create, update, and delete databases through that API. Impact...

CVE-2025-40715 SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo mensaje in /QISClient/api/v1/sucesospaginas...

CVE-2025-40715 SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo mensaje in /QISClient/api/v1/sucesospaginas...

CVE-2025-40714

Quiter Gateway is affected by an SQL injection in versions prior to 4.7.0. The vulnerability resides in the id_factura field of the endpoint /FacturaE/listado_facturas_ficha.jsp, allowing an attacker to retrieve, create, update and delete databases via that parameter. Impact is described as total...

CVE-2025-40714 SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo idfactura in /FacturaE/listadofacturasficha.jsp...

CVE-2025-40714 SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo idfactura in /FacturaE/listadofacturasficha.jsp...

CVE-2025-40713 SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo parameter in/FacturaE/BusquedasFacturasSesion...

CVE-2025-40713

CVE-2025-40713 affects Quiter Gateway versions prior to 4.7.0. The vulnerability is a SQL injection in the campo parameter of /FacturaE/BusquedasFacturasSesion, enabling an attacker to retrieve, create, update, and delete databases. Impact is described as CRITICAL (high confidentiality, integrity...

CVE-2025-40713 SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo parameter in/FacturaE/BusquedasFacturasSesion...

CVE-2025-40712

CVE-2025-40712 describes a SQL injection in Quiter Gateway, affecting versions prior to 4.7.0. The vulnerability allows an attacker to retrieve, create, update, and delete databases via the id_concesion parameter in the endpoint path “/FacturaE/DescargarFactura.” Impact is described as high/confi...

CVE-2025-40712 SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the idconcesion parameter in /FacturaE/DescargarFactura...

CVE-2025-40712 SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the idconcesion parameter in /FacturaE/DescargarFactura...

CVE-2025-40711

CVE-2025-40711 affects Quiter Gateway, vulnerable in versions prior to 4.7.0. The flaw allows an attacker to manipulate the id_concesion parameter in the endpoint /FacturaE/VerFacturaPDF to retrieve, create, update, and delete databases. Public references confirm SQL injection in Quiter Gateway b...

CVE-2025-40711 SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the idconcesion parameter in /FacturaE/VerFacturaPDF...

CVE-2025-40711 SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the idconcesion parameter in /FacturaE/VerFacturaPDF...

PT-2025-28416 · Unknown · Quiter Gateway

Name of the Vulnerable Software and Affected Versions: Quiter Gateway versions prior to 4.7.0 Description: A Reflected Cross-site Scripting XSS issue allows an attacker to execute JavaScript code in a victim's browser. This is achieved by sending a malicious URL through the id factura parameter i...

Quiter Gateway SQL注入漏洞

Quiter Gateway is an API interface from Quiter Spain. A SQL injection vulnerability exists in Quiter Gateway versions prior to 4.7.0, which stems from a SQL injection in the suceso.contenido parameter, which could lead to database manipulation...

Quiter Gateway SQL注入漏洞

Quiter Gateway is an API interface from Quiter Spain. A SQL injection vulnerability exists in Quiter Gateway versions prior to 4.7.0, which stems from a SQL injection in the idconcesion parameter, which could lead to database manipulation...