Ciges vulnerabilities
We track 5 vulnerabilities in Ciges products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2024.
Latest Ciges vulnerabilities
- 9.8 Critical severity
CIGESv2: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in ATISolutions CIGES affecting versions lower than 2.15.5. This vulnerability allows a remote attacker to send a specially crafted SQL query to the /modules/ajaxServiciosCentro.php point in the idCentro parameter and retrieve all t
- 7.5 High severity
CIGESv2: Exposure of Sensitive Information to an Unauthorized Actor
Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/composer/installed.json and retrieve all installed packages used by the application.
- 7.5 High severity
CIGESv2: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQ
- 7.5 High severity
CIGESv2: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the CIGESv2 system, through /ajaxSubServicios.php, in the 'idServicio' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL que
- 7.5 High severity
CIGESv2: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL query.