Atisoluciones vulnerabilities
We track 2 vulnerabilities in Atisoluciones products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 27, 2025.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Atisoluciones vulnerabilities
- 9.8 Critical severity
CIGES: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability has been found in Ciges 2.15.5 from ATISoluciones. This vulnerability allows an attacker to retrieve, create, update and delete database via $idServicio parameter in /modules/ajaxBloqueaCita.php endpoint.
- 7.5 High severity
CIGESv2: Exposure of Sensitive Information to an Unauthorized Actor
Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/composer/installed.json and retrieve all installed packages used by the application.