Atisoluciones Ciges
9 CVEs affecting Atisoluciones Ciges. Latest disclosed: 2025-11-24. Critical: 4, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-1751 | Critical | 9.8 | 2025-02-27 | A SQL Injection vulnerability has been found in Ciges 2.15.5 from ATISoluciones. This vulnerability allows an attacker to retrieve, create, update and delete d… |
CVE-2024-2724 | Critical | 9.8 | 2024-03-22 | SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' parameter. The exploitation of this vulnerability co… |
CVE-2024-2723 | Critical | 9.8 | 2024-03-22 | SQL injection vulnerability in the CIGESv2 system, through /ajaxSubServicios.php, in the 'idServicio' parameter. The exploitation of this vulnerability could a… |
CVE-2024-2722 | Critical | 9.8 | 2024-03-22 | SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter. The exploitation of this vulnerability could allow a re… |
CVE-2024-2725 | High | 7.5 | 2024-03-22 | Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/composer/installed.json and retrieve all installed… |
CVE-2024-2727 | Medium | 6.1 | 2024-03-22 | HTML injection vulnerability affecting the CIGESv2 system, which allows an attacker to inject arbitrary code and modify elements of the website and email confi… |
CVE-2024-2726 | Medium | 6.1 | 2024-03-22 | Stored Cross-Site Scripting (Stored-XSS) vulnerability affecting the CIGESv2 system, allowing an attacker to execute and store malicious javascript code in the… |
CVE-2024-2728 | Medium | 4.1 | 2024-03-22 | Information exposure vulnerability in the CIGESv2 system. This vulnerability could allow a local attacker to intercept traffic due to the lack of proper implem… |
CVE-2025-13596 | | 2025-11-24 | A sensitive information disclosure vulnerability exists in the error handling component of ATISoluciones CIGES Application version 2.15.6 and earlier. When cer… |