Vulnerability Description
A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encuestas/integraweb[_v4]/integra/html/view/hislistadoacciones.php.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tesigandia | Gandia Integra Total | >= 2.1.2217.3, <= 4.4.2236.1 |
Related Weaknesses (CWE)
References
- https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-gandThird Party Advisory
FAQ
What is CVE-2025-41374?
CVE-2025-41374 is a vulnerability with a CVSS score of 8.8 (HIGH). A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and ...
How severe is CVE-2025-41374?
CVE-2025-41374 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-41374?
Check the references section above for vendor advisories and patch information. Affected products include: Tesigandia Gandia Integra Total.