69 matches found
CVE-2025-41373
CVE-2025-41373 – Gandia Integra Total의 SQL 인젝션 작성자: Byte Reaper CVE: CVE-2025-41373 취약점: 인증된 SQL 인젝션 영향받는 경로: /encuestas/integrawebv4/integra/html/view/hislistadoacciones.php?idestudio= 설명: 이 엔드포인트는 idestudio 매개변수를 적절한 정화나 매개변수화 없이 SQL 쿼리에 직접 연결하여, 공격자가 임의의 SQL을 주입할 수 있도록 합니다. 이 PoC는 boolean 기반 및...
CVE-2025-41073
Path Traversal vulnerability in version 4.4.2236.1 of TESI Gandia Integra Total. This issue allows an authenticated attacker to download a ZIP file containing files from the server, including those located in parent directories e.g., ......, by exploiting the “direstudio” parameter in...
CVE-2025-41073
Path Traversal vulnerability in version 4.4.2236.1 of TESI Gandia Integra Total. This issue allows an authenticated attacker to download a ZIP file containing files from the server, including those located in parent directories e.g., ......, by exploiting the “direstudio” parameter in...
CVE-2025-41073 Path Traversal in Gandia Integra Total by TESI
Path Traversal vulnerability in version 4.4.2236.1 of TESI Gandia Integra Total. This issue allows an authenticated attacker to download a ZIP file containing files from the server, including those located in parent directories e.g., ......, by exploiting the “direstudio” parameter in...
CVE-2025-41073
CVE-2025-41073 describes a path traversal vulnerability in TESI Gandia Integra Total v4.4.2236.1. An authenticated attacker can exploit the direstudio parameter in /encuestas/integraweb[_v4]/integra/html/view/comprimir.php to download a ZIP file containing server files, including those in parent ...
EUVD-2025-35675
Path Traversal vulnerability in version 4.4.2236.1 of TESI Gandia Integra Total. This issue allows an authenticated attacker to download a ZIP file containing files from the server, including those located in parent directories e.g., ......, by exploiting the “direstudio” parameter in...
CVE-2025-41073 Path Traversal in Gandia Integra Total by TESI
Path Traversal vulnerability in version 4.4.2236.1 of TESI Gandia Integra Total. This issue allows an authenticated attacker to download a ZIP file containing files from the server, including those located in parent directories e.g., ......, by exploiting the “direstudio” parameter in...
PT-2025-43440
Name of the Vulnerable Software and Affected Versions TESI Gandia Integra Total version 4.4.2236.1 Description An authenticated attacker can download a ZIP file containing files from the server, including those in parent directories. This is possible by exploiting the direstudio parameter in the...
EUVD-2025-23354
Malicious code in bioql PyPI...
EUVD-2025-23359
Malicious code in bioql PyPI...
EUVD-2025-23353
Malicious code in bioql PyPI...
EUVD-2025-23355
Malicious code in bioql PyPI...
EUVD-2025-23356
Malicious code in bioql PyPI...
EUVD-2025-23360
Malicious code in bioql PyPI...
EUVD-2025-23357
Malicious code in bioql PyPI...
EUVD-2025-23358
Malicious code in bioql PyPI...
Gandia Integra Total 4.4.2236.1 SQL Injection
Gandia Integra Total versions 2.1.2217.3 through 4.4.2236.1 suffer from a remote SQL injection vulnerability...
CVE-2025-41372
A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...
CVE-2025-41370
A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encuestas/integraweb/html/view/acceso.php...
CVE-2025-41374
A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...