Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Ciges Component: Ciges Clear all filters
TI-2024-02541 CVE-2024-2728 · GHSA-r29m-p2q8-5rjj

Information disclosure in CIGESv2

Priority LOW 24

Information exposure vulnerability in the CIGESv2 system.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00162 Published 2024-03-22 No fix listed CWE-200
TI-2024-02539 CVE-2024-2726 · GHSA-cr9h-4rpp-pcvq

Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system

Priority LOW 27

Stored Cross-Site Scripting (Stored-XSS) vulnerability affecting the CIGESv2 system, allowing an attacker to execute and store malicious javascript code in the application form without prior registration.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00309 Published 2024-03-22 No fix listed CWE-79
TI-2024-02537 CVE-2024-2724 · GHSA-864h-2g93-vww3

SQL injection in CIGESv2

Priority MEDIUM 50

SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00684 Published 2024-03-22 No fix listed CWE-89
TI-2024-02536 CVE-2024-2723 · GHSA-rg8q-jvhc-8jw2

SQL injection in CIGESv2

Priority MEDIUM 44

SQL injection vulnerability in the CIGESv2 system, through /ajaxSubServicios.php, in the 'idServicio' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00684 Published 2024-03-22 No fix listed CWE-89
TI-2024-02535 CVE-2024-2722 · GHSA-9m9c-g4c8-j95g

SQL injection in CIGESv2

Priority MEDIUM 50

SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00683 Published 2024-03-22 No fix listed CWE-89