high8.8Public exploit code
CVE-2025-41373
A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Gandia Integra Total 4.4.2236.1 - SQL Injection2025-08-03 · webapps · multiple
Impact
A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encuestas/integraweb[_v4]/integra/html/view/hislistadoacciones.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tesigandia | Gandia Integra Total | from 2.1.2217.3 through 4.4.2236.1 |