CIGESv2 vulnerabilities
5 known vulnerabilities in CIGESv2 from Ciges. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
CIGESv2: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in ATISolutions CIGES affecting versions lower than 2.15.5. This vulnerability allows a remote attacker to send a specially crafted SQL query to the /modules/ajaxServiciosCentro.php point in the idCentro parameter and retrieve all t
- 7.5 High severity
CIGESv2: Exposure of Sensitive Information to an Unauthorized Actor
Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/composer/installed.json and retrieve all installed packages used by the application.
- 7.5 High severity
CIGESv2: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQ
- 7.5 High severity
CIGESv2: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the CIGESv2 system, through /ajaxSubServicios.php, in the 'idServicio' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL que
- 7.5 High severity
CIGESv2: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL query.