CNNVD-202508-040 Information
Aug 01, 2025
cve
CNNVD ID
CNNVD-202508-040
Related CVE
- CNNVD Published: 2025-08-01
Description (Chinese)
TESI Gandia Integra Total是西班牙TESI公司的一款基于Web的在线调查和数据分析系统。 TESI Gandia Integra Total 2.1.2217.3至4.4.2236.1版本存在SQL注入漏洞，该漏洞源于文件/encuestas/integraweb_v4/integra/html/view/acceso.php中参数idestudio存在SQL注入，可能导致数据库操作。
Description (English)
TESI Gandia Integra Total is a Web-based web-based survey and data analysis system for TESI in Spain. There is a SQL injection loophole in TESI Gandia Integra Total 2.1.2217.3 to 4.4.2236.1, which originates from the SQL injection of the parameter idestudio in document/encuestas/integraweb v4/integra/html/view/acceso.php, which may lead to the operation of the database.
Hazard Level
Low
Vulnerability Type
SQL注入
Affected Vendor
TESI
Published
2025-08-01
Last Modified
2026-02-24