CVE-2025-40712 | Quiter Gateway up to 4.6.x DescargarFactura id_concesion sql injection

A vulnerability has been found in Quiter Gateway up to 4.6.x and classified as critical. Affected by this vulnerability is an unknown functionality of the file /FacturaE/DescargarFactura. The manipulation of the argument id_concesion leads to sql injection.

This vulnerability is known as CVE-2025-40712. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.