CVE-2025-40712 Information

Jul 09, 2025 cve

Description

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve create update and delete databases through the id_concesion parameter in /FacturaE/DescargarFactura.

Reference

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-quiterweb-autoweb-quiter

CNNVD-202507-945 (Published: 2025-07-08)

Share on: