← Database

CVE-2025-41373

HIGH CVSS: 8.8 Published: 2025-08-01 Modified: 2026-06-17

Description

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encuestas/integraweb[_v4]/integra/html/view/hislistadoacciones.php.

Affected Platforms

Tesigandia Gandia Integra Total

Weakness Type

CWE-89

References