Quiter Gateway SQL Injection Vulnerability
Vulnerability
A SQL injection vulnerability exists in Quiter Gateway versions prior to 4.7.0. This vulnerability allows attackers to retrieve, create, update, and delete databases through the 'id_factura' parameter in the '/<Client>FacturaE/listado_facturas_ficha.jsp' endpoint.
Impact
Exploitation of this vulnerability allows for unauthorized database manipulation, including retrieval, creation, updating, and deletion of database records.
Remediation
Quiter has released a patch in version 4.7.0 of Quiter Gateway. This update has been applied to all affected customers.
Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
7.4remediation
7.7relevance
0.2threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.