CVE Feed

    Dashboard / CVE / CVE-2024-2723

    CVE-2024-2723

    SQL injection vulnerability in the CIGESv2 system, through /ajaxSubServicios.php, in the 'idServicio' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL query.

    Published:Mar 22, 2024
    Last Modified:Oct 15, 2025
    EPS:Mar 22, 2024
    EPSS Score:0.00248
    CVSS Score:9.8

    Affected Products

    Vendor
    Atisoluciones
    Product
    Ciges
    Vendor
    Ciges
    Product
    Cigesv2

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-13596 (CVSS 2.7) — A sensitive information disclosure vulnerability exists in the error handling component of ATISoluciones CIGES…
    CVE-2024-2728 (CVSS 4.1) — Information exposure vulnerability in the CIGESv2 system. This vulnerability could allow a local attacker to i…
    CVE-2024-2727 (CVSS 6.1) — HTML injection vulnerability affecting the CIGESv2 system, which allows an attacker to inject arbitrary code a…
    CVE-2024-2726 (CVSS 6.1) — Stored Cross-Site Scripting (Stored-XSS) vulnerability affecting the CIGESv2 system, allowing an attacker to e…
    CVE-2024-2725 (CVSS 7.5) — Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/co…
    CVE-2024-2724 (CVSS 9.8) — SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' par…
    CVE-2024-2722 (CVSS 9.8) — SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter. The ex…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High