SQL Injection in Tesi Gandia Integra Total
CVE-2025-41377
A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encuestas/integraweb[_v4]/integra/html/view/consultacuotasred.php.
Vulnerability class: SQL Injection
EPSS: 0.003 (25.2th percentile) — read the EPSS interpretation.
Affected products
- Tesi Gandia Integra Total — versions 2.1.2217.3