SQL Injection Vulnerability in Gandia Integra Total by TESI

CVE-2025-41372

What is CVE-2025-41372?

A SQL injection vulnerability has been identified in the Gandia Integra Total product by TESI, allowing authenticated attackers to perform unauthorized actions. By manipulating the 'idestudio' parameter in a specific PHP file, attackers could retrieve, create, update, and delete databases, leading to potential data breaches and loss of sensitive information. Organizations using affected versions should prioritize patching this vulnerability to safeguard their database security.

References