Skip to content
OpenAdvisories

Vendor

CIGES

8 known vulnerabilities.

Products

CIGESv2 8
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-8161

    SQL injection vulnerability in CIGESv2 system

    SQL injection vulnerability in ATISolutions CIGES affecting versions lower than 2.15.5. This vulnerability allows a remote attacker to send a specially crafted SQL query to the /modules/ajaxServiciosCentro.php point in the idCentro parameter and retrieve all …

    CIGES CIGESv2
  • Critical 9.8
    CVE-2024-2724

    SQL injection vulnerability in the CIGESv2 system

    SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted S…

    CIGES CIGESv2
  • Critical 9.8
    CVE-2024-2723

    SQL injection vulnerability in the CIGESv2 system

    SQL injection vulnerability in the CIGESv2 system, through /ajaxSubServicios.php, in the 'idServicio' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL qu…

    CIGES CIGESv2
  • Critical 9.8
    CVE-2024-2722

    SQL injection vulnerability in the CIGESv2 system

    SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL query.

    CIGES CIGESv2