Read the docs

Ciges

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Ciges records in CISA KEV

No Ciges vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ciges 7 records MEDIUM

Records

10 records

TI-2024-02537 CVE-2024-2724 · GHSA-864h-2g93-vww3

SQL injection in CIGESv2

Priority MEDIUM 50

SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00684 Published 2024-03-22 No fix listed CWE-89
TI-2024-02535 CVE-2024-2722 · GHSA-9m9c-g4c8-j95g

SQL injection in CIGESv2

Priority MEDIUM 50

SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00683 Published 2024-03-22 No fix listed CWE-89
TI-2025-01508 CVE-2025-1751 · GHSA-56qw-564q-v8rw

SQL Injection CIGES

Priority MEDIUM 49

A SQL Injection vulnerability has been found in Ciges 2.15.5 from ATISoluciones.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00489 Published 2025-02-27 No fix listed CWE-89
TI-2024-07568 CVE-2024-8161 · GHSA-wj96-5g7r-c538

SQL injection vulnerability in CIGESv2 system

Priority MEDIUM 49

SQL injection vulnerability in ATISolutions CIGES affecting versions lower than 2.15.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00487 Published 2024-08-26 Fixed in 2.15.5 CWE-89
TI-2024-02536 CVE-2024-2723 · GHSA-rg8q-jvhc-8jw2

SQL injection in CIGESv2

Priority MEDIUM 44

SQL injection vulnerability in the CIGESv2 system, through /ajaxSubServicios.php, in the 'idServicio' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00684 Published 2024-03-22 No fix listed CWE-89
TI-2024-02539 CVE-2024-2726 · GHSA-cr9h-4rpp-pcvq

Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system

Priority LOW 27

Stored Cross-Site Scripting (Stored-XSS) vulnerability affecting the CIGESv2 system, allowing an attacker to execute and store malicious javascript code in the application form without prior registration.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00309 Published 2024-03-22 No fix listed CWE-79
TI-2024-02541 CVE-2024-2728 · GHSA-r29m-p2q8-5rjj

Information disclosure in CIGESv2

Priority LOW 24

Information exposure vulnerability in the CIGESv2 system.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00162 Published 2024-03-22 No fix listed CWE-200
Open these records in search →