CVE-2025-41374

CVE-2025-41374 affects Gandia Integra Total TESI (versions 2.1.2217.3 through 4.4.2236.1). The vulnerability resides in the idestudio parameter of /encuestas/integraweb[_v4]/integra/html/view/hislistadoacciones.php, allowing an authenticated attacker to retrieve, create, update, and delete databa...

CVE-2025-41374 SQL injection vulnerability in Gandia Integra Total

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...

CVE-2025-41373

CVE-2025-41373 is a SQL injection affecting Gandia Integra Total (TESI) versions 2.1.2217.3 through 4.4.2236.1. The vulnerability arises from the idestudio parameter being concatenated directly into an SQL query in /encuestas/integraweb_v4/integra/html/view/hislistadoacciones.php, allowing an aut...

CVE-2025-41373 SQL injection vulnerability in Gandia Integra Total

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...

CVE-2025-41372

CVE-2025-41372 affects Gandia Integra Total, versions 2.1.2217.3 through 4.4.2236.1. The vulnerability is a SQL injection in the idestudio parameter of the endpoint /encuestas/integraweb[_v4]/integra/html/view/informe_campo_entrevistas.php, exploitable by an authenticated attacker to retrieve, cr...

CVE-2025-41371 SQL injection vulnerability in Gandia Integra Total

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...

CVE-2025-41370 SQL injection vulnerability in Gandia Integra Total

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encuestas/integraweb/html/view/acceso.php...

PT-2025-31635

Name of the Vulnerable Software and Affected Versions Gandia Integra Total versions 2.1.2217.3 through 4.4.2236.1 Description A SQL injection vulnerability exists in Gandia Integra Total of TESI. The vulnerability allows an authenticated attacker to retrieve, create, update, and delete databases...

PT-2025-31636

Name of the Vulnerable Software and Affected Versions Gandia Integra Total TESI versions 2.1.2217.3 through 4.4.2236.1 Description A SQL injection vulnerability exists in Gandia Integra Total TESI. The vulnerability allows an authenticated attacker to retrieve, create, update, and delete database...

CVE-2025-41372: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...

TESI Gandia Integra Total SQL注入漏洞

TESI Gandia Integra Total is a Web-based online survey and data analysis system from TESI Spain. An injection vulnerability exists in TESI Gandia Integra Total versions 2.1.2217.3 through 4.4.2236.1, which originates in the file /encuestas/integrawebv4/integra/html/view/consultacuotasred.php with...

CVE-2025-41374: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...

CVE-2025-41373: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...

TESI Gandia Integra Total SQL注入漏洞

TESI Gandia Integra Total is a Web-based online survey and data analysis system from TESI Spain. A SQL injection vulnerability exists in TESI Gandia Integra Total versions 2.1.2217.3 through 4.4.2236.1, which originates from the presence of the parameter idestudio in the file...

CVE-2025-41370: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encuestas/integraweb/html/view/acceso.php...

CVE-2025-41371: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in...