CVE-2025-41073: high-severity vulnerability in TESI Gandia Integra Total
Path Traversal in Gandia Integra Total by TESI
Published
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.1epss 0.4%
exploitation probability
0.4%top 70% of all CVEs
observed exploitation
nono source reports it
Path Traversal vulnerability in version 4.4.2236.1 of TESI Gandia Integra Total. This issue allows an authenticated attacker to download a ZIP file containing files from the server, including those located in parent directories (e.g., ..\..\..), by exploiting the “direstudio” parameter in “/encuestas/integraweb[_v4]/integra/html/view/comprimir.php”.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
TESI · Gandia Integra TotalRelated CVEs — TESI Gandia Integra Total
In the same product, most dangerous first.
CVE-2025-41373HIGHSQL injection vulnerability in Gandia Integra TotalEPSS 1.1%CVE-2025-41371CRITICALSQL injection vulnerability in Gandia Integra TotalEPSS 0.6%CVE-2025-41370CRITICALSQL injection vulnerability in Gandia Integra TotalEPSS 0.6%CVE-2025-41374HIGHSQL injection vulnerability in Gandia Integra TotalEPSS 0.6%CVE-2025-41372HIGHSQL injection vulnerability in Gandia Integra TotalEPSS 0.6%CVE-2025-41377HIGHSQL injection vulnerability in Gandia Integra TotalEPSS 0.4%