CVE-2025-40716 Information

Jul 09, 2025 cve

Description

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve create update and delete databases through the suceso.contenido mensaje in /QMSCliente/Sucesos.action.

Reference

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-quiterweb-autoweb-quiter

CNNVD-202507-943 (Published: 2025-07-08)

Share on: