CVE Feed

    Dashboard / CVE / CVE-2024-8161

    CVE-2024-8161

    SQL injection vulnerability in ATISolutions CIGES affecting versions lower than 2.15.5. This vulnerability allows a remote attacker to send a specially crafted SQL query to the /modules/ajaxServiciosCentro.php point in the idCentro parameter and retrieve all the information stored in the database.

    Published:Aug 26, 2024
    Last Modified:Apr 15, 2026
    EPS:Aug 26, 2024
    EPSS Score:0.0054
    CVSS Score:9.8

    Affected Products

    Vendor
    Ciges
    Product
    Cigesv2

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-2728 (CVSS 4.1) — Information exposure vulnerability in the CIGESv2 system. This vulnerability could allow a local attacker to i…
    CVE-2024-2727 (CVSS 6.1) — HTML injection vulnerability affecting the CIGESv2 system, which allows an attacker to inject arbitrary code a…
    CVE-2024-2726 (CVSS 6.1) — Stored Cross-Site Scripting (Stored-XSS) vulnerability affecting the CIGESv2 system, allowing an attacker to e…
    CVE-2024-2725 (CVSS 7.5) — Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/co…
    CVE-2024-2724 (CVSS 9.8) — SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' par…
    CVE-2024-2723 (CVSS 9.8) — SQL injection vulnerability in the CIGESv2 system, through /ajaxSubServicios.php, in the 'idServicio' paramete…
    CVE-2024-2722 (CVSS 9.8) — SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter. The ex…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High