CVE-2024-2722

SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL query...

CVE-2024-2722

CVE-2024-2722 affects the CIGESv2 system via the /ajaxConfigTotem.php endpoint, where the id parameter is vulnerable to SQL injection. This condition could allow a remote attacker to retrieve all data stored in the database, as described in the NVD entry. The available references corroborate a da...

CVE-2024-2722: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL query...