Tesigandia

Gandia Integra Total

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2025-41073

  • EPSS 0.07%
  • Veröffentlicht 23.10.2025 10:57:27
  • Zuletzt bearbeitet 30.10.2025 16:50:50

Path Traversal vulnerability in version 4.4.2236.1 of TESI Gandia Integra Total. This issue allows an authenticated attacker to download a ZIP file containing files from the server, including those located in parent directories (e.g., ..\..\..), by e...

8.8

CVE-2025-41374

  • EPSS 0.04%
  • Veröffentlicht 01.08.2025 12:29:35
  • Zuletzt bearbeitet 08.10.2025 18:41:31

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter...

8.8

CVE-2025-41373

  • EPSS 0.07%
  • Veröffentlicht 01.08.2025 12:29:25
  • Zuletzt bearbeitet 08.10.2025 18:41:23

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter...

8.8

CVE-2025-41372

  • EPSS 0.04%
  • Veröffentlicht 01.08.2025 12:29:13
  • Zuletzt bearbeitet 08.10.2025 18:41:16

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter...

8.8

CVE-2025-41371

  • EPSS 0.04%
  • Veröffentlicht 01.08.2025 12:28:36
  • Zuletzt bearbeitet 08.10.2025 18:41:10

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter...

8.8

CVE-2025-41370

  • EPSS 0.04%
  • Veröffentlicht 01.08.2025 12:28:12
  • Zuletzt bearbeitet 08.10.2025 18:33:44

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter...