Description
A SQL Injection vulnerability has been found in Ciges 2.15.5 from ATISoluciones. This vulnerability allows an attacker to retrieve, create, update and delete database via $idServicio parameter in /modules/ajaxBloqueaCita.php endpoint.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ATISoluciones | CIGES | 2.15.5 | — |