VULNERABILITY INTELLIGENCE

CVE-2025-41374

CVSS score8.8 HIGH
EPSS probability0.65%
CISA KEVNot currently listed
Published2025-08-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encuestas/integraweb[_v4]/integra/html/view/hislistadoacciones.php.

Weakness classification

  • cve-coordination@incibe.es: CWE-89

Primary references