Read the docs

Ciges

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Ciges records in CISA KEV

No Ciges vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ciges 7 records MEDIUM

Records

7 records in Ciges · all components

TI-2024-02537 CVE-2024-2724 · GHSA-864h-2g93-vww3

SQL injection in CIGESv2

Priority MEDIUM 50

SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00684 Published 2024-03-22 No fix listed CWE-89
TI-2024-02535 CVE-2024-2722 · GHSA-9m9c-g4c8-j95g

SQL injection in CIGESv2

Priority MEDIUM 50

SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00683 Published 2024-03-22 No fix listed CWE-89
TI-2024-02536 CVE-2024-2723 · GHSA-rg8q-jvhc-8jw2

SQL injection in CIGESv2

Priority MEDIUM 44

SQL injection vulnerability in the CIGESv2 system, through /ajaxSubServicios.php, in the 'idServicio' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00684 Published 2024-03-22 No fix listed CWE-89
TI-2024-02539 CVE-2024-2726 · GHSA-cr9h-4rpp-pcvq

Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system

Priority LOW 27

Stored Cross-Site Scripting (Stored-XSS) vulnerability affecting the CIGESv2 system, allowing an attacker to execute and store malicious javascript code in the application form without prior registration.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00309 Published 2024-03-22 No fix listed CWE-79
TI-2024-02541 CVE-2024-2728 · GHSA-r29m-p2q8-5rjj

Information disclosure in CIGESv2

Priority LOW 24

Information exposure vulnerability in the CIGESv2 system.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00162 Published 2024-03-22 No fix listed CWE-200
Open these records in search →