VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 8, 2025· Updated Jul 10, 2025

SQL injection vulnerability in Quiter Gateway

CVE-2025-40714

Description

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo id_factura in /FacturaE/listado_facturas_ficha.jsp.

Affected products

2
  • Quiter/Quiter Gatewayllm-fuzzy
    Range: <4.7.0
  • Quiter/Quiter Gateway (Java WAR on Apache Tomcat)v5
    Range: 0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.