Approved changes feed: RSS · Atom

cpe:2.3:a:atisoluciones:ciges:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAtisoluciones (1f253372-55df-5102-9456-7c0ceb325d8c)
ProductCiges (2a1513b2-de3c-55ac-b0d2-5fdc39034ed3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-1751 vulnerable 2026-06-08 07:08:37.980955 SQL Injection CIGES
CRITICAL (9.8)
A SQL Injection vulnerability has been found in Ciges 2.15.5 from ATISoluciones. This vulnerability allows an attacker to retrieve, create, update and delete database via $idServicio parameter in /modules/ajaxBloqueaCita.php endpoint.
Published: 2025-02-27T12:03:10.610Z
Updated: 2025-02-27T14:42:34.087Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13596 vulnerable 2026-06-08 07:04:32.578896 Improper Error Handling Leading to Sensitive Information Disclosure in CIGES ≤ 2.15.6
A sensitive information disclosure vulnerability exists in the error handling component of ATISoluciones CIGES Application version 2.15.6 and earlier. When certain unexpected conditions trigger unhandled exceptions, the application returns detailed error messages and stack traces to the client. This may expose internal filesystem paths, SQL queries, database connection details, or environment configuration data to remote unauthenticated attackers. This issue allows information gathering and reconnaissance but does not enable direct system compromise.
Published: 2025-11-24T07:30:49.545Z
Updated: 2025-11-24T13:47:44.911Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.