CVE-2025-41370

CVE-2025-41370 affects Gandia Integra Total TESI versions 2.1.2217.3 through 4.4.2236.1. The vulnerability is a SQL injection in the idestudio parameter of the API endpoint /encuestas/integraweb/html/view/acceso.php, which an authenticated attacker can use to retrieve, create, update, and delete ...

CVE-2025-41370 SQL injection vulnerability in Gandia Integra Total

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encuestas/integraweb/html/view/acceso.php...