Ciges vulnerabilities

2 known vulnerabilities in Ciges from Atisoluciones. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  CIGES: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-1751Feb 27, 2025Atisoluciones

  A SQL Injection vulnerability has been found in Ciges 2.15.5 from ATISoluciones. This vulnerability allows an attacker to retrieve, create, update and delete database via $idServicio parameter in /modules/ajaxBloqueaCita.php endpoint.

• 7.5 High severity

  CIGESv2: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-2725Mar 22, 2024Ciges

  Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/composer/installed.json and retrieve all installed packages used by the application.