CVE-2025-41373

CVE-2025-41373 is a SQL injection affecting Gandia Integra Total (TESI) versions 2.1.2217.3 through 4.4.2236.1. The vulnerability arises from the idestudio parameter being concatenated directly into an SQL query in /encuestas/integraweb_v4/integra/html/view/hislistadoacciones.php, allowing an aut...

CVE-2025-41372

CVE-2025-41372 affects Gandia Integra Total, versions 2.1.2217.3 through 4.4.2236.1. The vulnerability is a SQL injection in the idestudio parameter of the endpoint /encuestas/integraweb[_v4]/integra/html/view/informe_campo_entrevistas.php, exploitable by an authenticated attacker to retrieve, cr...

CVE-2025-41372 SQL injection vulnerability in Gandia Integra Total

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...

CVE-2025-41371 SQL injection vulnerability in Gandia Integra Total

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...

CVE-2025-41371

Gandia Integra Total (TESI) affected versions 2.1.2217.3 through 4.4.2236.1 have a SQL injection in the idestudio parameter of the endpoint /encuestas/integraweb_v4/integra/html/view/acceso.php. An authenticated attacker could retrieve, create, update, or delete databases via this parameter. The ...

CVE-2025-41371 SQL injection vulnerability in Gandia Integra Total

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...

CVE-2025-8443 code-projects Online Medicine Guide login.php sql injection

A vulnerability was found in code-projects Online Medicine Guide 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-8438

Code-projects Wazifa System 1.0 is affected by a SQL injection in /controllers/postpublish.php through the post parameter. The vulnerability can be exploited remotely and has been publicly disclosed; multiple sources (CNVD, Red Hat, CNNVD, CVE records, PT Security) corroborate the issue. Affected...

CVE-2025-8437 code-projects Kitchen Treasure userregistration.php sql injection

A vulnerability classified as critical has been found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2025-8437 code-projects Kitchen Treasure userregistration.php sql injection

A vulnerability classified as critical has been found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2025-8436 projectworlds Online Admission System viewdoc.php sql injection

A vulnerability was found in projectworlds Online Admission System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /viewdoc.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has be...

PT-2025-31643 · Unknown · Restaurant Order System

Name of the Vulnerable Software and Affected Versions: Restaurant Order System version 1.0 Description: A SQL Injection issue exists in Restaurant Order System 1.0. A local attacker can obtain sensitive information via the payment.php file. Recommendations: At the moment, there is no information...

PT-2025-31632 · Gandia · Gandia Integra Total Tesi

Name of the Vulnerable Software and Affected Versions: Gandia Integra Total TESI versions 2.1.2217.3 through 4.4.2236.1 Description: A SQL injection vulnerability exists in Gandia Integra Total TESI. The vulnerability allows an authenticated attacker to retrieve, create, update, and delete...

PT-2025-31633 · Unknown · Gandia Integra Total

Name of the Vulnerable Software and Affected Versions: Gandia Integra Total versions 2.1.2217.3 through 4.4.2236.1 Description: A SQL injection vulnerability exists in Gandia Integra Total. The vulnerability allows an authenticated attacker to retrieve, create, update, and delete databases throug...

PT-2025-31634 · Unknown · Gandia Integra Total

Name of the Vulnerable Software and Affected Versions: Gandia Integra Total versions 2.1.2217.3 through 4.4.2236.1 Description: A SQL injection vulnerability exists in Gandia Integra Total. The vulnerability allows an authenticated attacker to retrieve, create, update, and delete databases throug...

PT-2025-31682 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 4.1.1 Patch 15 Description: An authenticated SQL injection flaw allows a low-privileged attacker to extract administrator credentials and escalate privileges. Following privilege escalation, an unrestricted file uplo...

PT-2025-31770 · Undefined · Undefined

CVE-2025-54841 - Apache Struts SQL Injection CVE ID : CVE-2025-54841 Published : Aug. 1, 2025, 4:16 a.m. | 4 hours, 3 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2025-31658 · Unknown · Cloudclassroom-Php Project

Name of the Vulnerable Software and Affected Versions: CloudClassroom-PHP-Project version 1.0 Description: A SQL Injection issue exists in the takeassessment2.php file. The Q4 POST parameter is not properly sanitized before being used in SQL queries. Recommendations: Ensure proper sanitization of...

PT-2025-31637

Name of the Vulnerable Software and Affected Versions Gandia Integra Total versions 2.1.2217.3 through 4.4.2236.1 Description A SQL injection vulnerability exists in Gandia Integra Total. The vulnerability allows an authenticated attacker to retrieve, create, update, and delete databases through...

PT-2025-31636 · Gandia · Gandia Integra Total Tesi

Name of the Vulnerable Software and Affected Versions: Gandia Integra Total TESI versions 2.1.2217.3 through 4.4.2236.1 Description: A SQL injection vulnerability exists in Gandia Integra Total TESI. The vulnerability allows an authenticated attacker to retrieve, create, update, and delete...