CVE-2025-41370 – Gandia Integra Total TESI SQL Injection Vulnerability

CVE ID : CVE-2025-41370

Published : Aug. 1, 2025, 1:15 p.m. | 22 minutes ago

Description : A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the ‘idestudio’ parameter in /encuestas/integraweb/html/view/acceso.php.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…