TESI vulnerabilities
We track 6 vulnerabilities in TESI products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on August 1, 2025.
Latest TESI vulnerabilities
- 8.8 High severity
Gandia Integra Total: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encue
- 8.8 High severity
Gandia Integra Total: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encue
- 8.8 High severity
Gandia Integra Total: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encue
- 8.8 High severity
Gandia Integra Total: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encue
- 8.8 High severity
Gandia Integra Total: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encue
- 8.7 High severity
Gandia Integra Total: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encue