ATISoluciones CIGES 2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:atisoluciones:ciges:2.0:*:*:*:*:*:*:*
part: a version: 2.0 update: *
| Vendor | Atisoluciones (1f253372-55df-5102-9456-7c0ceb325d8c) |
|---|---|
| Product | Ciges (2a1513b2-de3c-55ac-b0d2-5fdc39034ed3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-2728 |
vulnerable | 2026-06-08 06:35:27.185968 |
Information exposure vulnerability in the CIGESv2 system
MEDIUM (4.1)
Information exposure vulnerability in the CIGESv2 system. This vulnerability could allow a local attacker to intercept traffic due to the lack of proper implementation of the TLS protocol.
Published: 2024-03-22T13:37:23.204Z
Updated: 2024-08-01T19:25:41.209Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2727 |
vulnerable | 2026-06-08 06:35:27.185613 |
Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system
MEDIUM (6.1)
HTML injection vulnerability affecting the CIGESv2 system, which allows an attacker to inject arbitrary code and modify elements of the website and email confirmation message.
Published: 2024-03-22T13:36:35.270Z
Updated: 2024-08-01T19:25:40.608Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2726 |
vulnerable | 2026-06-08 06:35:27.185165 |
Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system
MEDIUM (6.1)
Stored Cross-Site Scripting (Stored-XSS) vulnerability affecting the CIGESv2 system, allowing an attacker to execute and store malicious javascript code in the application form without prior registration.
Published: 2024-03-22T13:36:18.836Z
Updated: 2024-08-01T19:25:40.623Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2725 |
vulnerable | 2026-06-08 06:35:27.184355 |
Exposure of Sensitive Information vulnerability in the CIGESv2 system
HIGH (7.5)
Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/composer/installed.json and retrieve all installed packages used by the application.
Published: 2024-03-22T13:35:12.508Z
Updated: 2024-08-01T19:25:40.603Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2724 |
vulnerable | 2026-06-08 06:35:27.183419 |
SQL injection vulnerability in the CIGESv2 system
CRITICAL (9.8)
SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL query.
Published: 2024-03-22T13:34:31.406Z
Updated: 2024-08-01T19:25:41.323Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2723 |
vulnerable | 2026-06-08 06:35:27.182533 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2722 |
vulnerable | 2026-06-08 06:35:27.181584 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.