PT-2025-28407 · Unknown · Quiter Gateway

Name of the Vulnerable Software and Affected Versions: Quiter Gateway versions prior to 4.7.0 Description: The issue allows an attacker to retrieve, create, update, and delete databases through the id concesion parameter in the "/FacturaE/DescargarFactura" endpoint. Recommendations: For versions...

Quiter Gateway 跨站脚本漏洞

Quiter Gateway is an API interface from Quiter Spain. A cross-site scripting vulnerability exists in Quiter Gateway versions prior to 4.7.0, which stems from the presence of reflective cross-site scripting in the campo parameter, which could lead to the execution of malicious code...

PT-2025-28408 · Unknown · Quiter Gateway

Name of the Vulnerable Software and Affected Versions: Quiter Gateway versions prior to 4.7.0 Description: The issue allows an attacker to retrieve, create, update, and delete databases through the campo parameter in the "/FacturaE/BusquedasFacturasSesion" endpoint. Recommendations: For versions...

PT-2025-28413 · Unknown · Quiter Gateway

Name of the Vulnerable Software and Affected Versions: Quiter Gateway versions prior to 4.7.0 Description: The issue is related to improper error handling, which allows an attacker to send malformed payloads and generate error messages containing sensitive information. Recommendations: For versio...

Quiter Gateway 安全漏洞

Quiter Gateway is an API interface from Quiter Spain. A security vulnerability exists in Quiter Gateway versions prior to 4.7.0 that stems from mishandling of errors and could lead to the disclosure of sensitive information...

CVE-2025-40713: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo parameter in/ FacturaE/BusquedasFacturasSesion...

CVE-2025-40712: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the idconcesion parameter in / FacturaE/DescargarFactura...

CVE-2025-40711: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the idconcesion parameter in / FacturaE/VerFacturaPDF...

Quiter Gateway SQL注入漏洞

Quiter Gateway is an API interface from Quiter Spain. A SQL injection vulnerability exists in Quiter Gateway versions prior to 4.7.0, which stems from a SQL injection in the campo parameter that could lead to database manipulation...

PT-2025-28415 · Unknown · Quiter Gateway

Name of the Vulnerable Software and Affected Versions: Quiter Gateway versions prior to 4.7.0 Description: The issue is a Reflected Cross-site Scripting XSS vulnerability that allows an attacker to execute JavaScript code in the victim's browser. This is achieved by sending a malicious URL throug...

Quiter Gateway SQL注入漏洞

Quiter Gateway is an API interface from Quiter Spain. A SQL injection vulnerability exists in Quiter Gateway versions prior to 4.7.0, which stems from a SQL injection in the idconcesion parameter, which could lead to database manipulation...

Quiter Gateway SQL注入漏洞

Quiter Gateway is an API interface from Quiter Spain. A SQL injection vulnerability exists in Quiter Gateway versions prior to 4.7.0, which stems from an SQL injection in the mensaje parameter that could lead to database manipulation...

Quiter Gateway SQL注入漏洞

Quiter Gateway is an API interface from Quiter Spain. A SQL injection vulnerability exists in Quiter Gateway versions prior to 4.7.0, which stems from an SQL injection in the pagina.filter.categoria parameter, which could lead to database manipulation...

Quiter Gateway 跨站脚本漏洞

Quiter Gateway is an API interface from Quiter Spain. A cross-site scripting vulnerability exists in Quiter Gateway versions prior to 4.7.0, which stems from the presence of reflective cross-site scripting in the idconcesion parameter, which could lead to the execution of malicious code...

CVE-2025-40721: Improper Neutralization of Input During Web Page Generation

Reflected Cross-site Scripting XSS vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the idfactura parameter in / FacturaE/listadofacturasficha.jsp...

CVE-2025-40718: Generation of Error Message Containing Sensitive Information

Improper error handling vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to send malformed payloads to generate error messages containing sensitive information...

CVE-2025-40714: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo idfactura in / FacturaE/listadofacturasficha.jsp...

Quiter Gateway SQL注入漏洞

Quiter Gateway is an API interface from Quiter Spain. A SQL injection vulnerability exists in Quiter Gateway versions prior to 4.7.0, which stems from an SQL injection in the idfactura parameter, which could lead to database manipulation...

PT-2025-28412 · Unknown · Quiter Gateway

Name of the Vulnerable Software and Affected Versions: Quiter Gateway versions prior to 4.7.0 Description: The issue allows an attacker to retrieve, create, update, and delete databases through the "pagina.filter.categoria mensaje" in the "/QuiterGatewayWeb/api/v1/sucesospagina" endpoint. This...

Quiter Gateway 跨站脚本漏洞

Quiter Gateway is an API interface from Quiter Spain. A cross-site scripting vulnerability exists in Quiter Gateway versions prior to 4.7.0, which stems from the presence of reflective cross-site scripting in the idfactura parameter, which could lead to the execution of malicious code...