Approved changes feed: RSS · Atom
cpe:2.3:a:ciges:cigesv2:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ciges (0ce611c5-c8ee-5b07-8d63-15efdb0bd7ab) |
|---|---|
| Product | Cigesv2 (6a23cfcc-9a6c-5ad1-b21d-754e33bd2475) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8161 |
vulnerable | 2026-06-08 07:00:22.795345 |
SQL injection vulnerability in CIGESv2 system
CRITICAL (9.8)
SQL injection vulnerability in ATISolutions CIGES affecting versions lower than 2.15.5. This vulnerability allows a remote attacker to send a specially crafted SQL query to the /modules/ajaxServiciosCentro.php point in the idCentro parameter and retrieve all the information stored in the database.
Published: 2024-08-26T08:46:08.220Z
Updated: 2024-08-26T15:07:44.572Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2728 |
vulnerable | 2026-06-08 06:35:27.185936 |
Information exposure vulnerability in the CIGESv2 system
MEDIUM (4.1)
Information exposure vulnerability in the CIGESv2 system. This vulnerability could allow a local attacker to intercept traffic due to the lack of proper implementation of the TLS protocol.
Published: 2024-03-22T13:37:23.204Z
Updated: 2024-08-01T19:25:41.209Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2727 |
vulnerable | 2026-06-08 06:35:27.185579 |
Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system
MEDIUM (6.1)
HTML injection vulnerability affecting the CIGESv2 system, which allows an attacker to inject arbitrary code and modify elements of the website and email confirmation message.
Published: 2024-03-22T13:36:35.270Z
Updated: 2024-08-01T19:25:40.608Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2726 |
vulnerable | 2026-06-08 06:35:27.185017 |
Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system
MEDIUM (6.1)
Stored Cross-Site Scripting (Stored-XSS) vulnerability affecting the CIGESv2 system, allowing an attacker to execute and store malicious javascript code in the application form without prior registration.
Published: 2024-03-22T13:36:18.836Z
Updated: 2024-08-01T19:25:40.623Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2725 |
vulnerable | 2026-06-08 06:35:27.184320 |
Exposure of Sensitive Information vulnerability in the CIGESv2 system
HIGH (7.5)
Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/composer/installed.json and retrieve all installed packages used by the application.
Published: 2024-03-22T13:35:12.508Z
Updated: 2024-08-01T19:25:40.603Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2724 |
vulnerable | 2026-06-08 06:35:27.183318 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2723 |
vulnerable | 2026-06-08 06:35:27.182503 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2722 |
vulnerable | 2026-06-08 06:35:27.180880 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.