CVE-2024-2728 Information exposure vulnerability in the CIGESv2 system

Information exposure vulnerability in the CIGESv2 system. This vulnerability could allow a local attacker to intercept traffic due to the lack of proper implementation of the TLS protocol...

CVE-2024-2728

CVE-2024-2728 affects the CIGESv2 system. The issue is an information exposure due to an improper TLS implementation, enabling a local attacker to intercept traffic. Affected component is the CIGESv2 system’s TLS handling; impact is confidentiality loss with no integrity/availability impact state...

CVE-2024-2727 Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system

HTML injection vulnerability affecting the CIGESv2 system, which allows an attacker to inject arbitrary code and modify elements of the website and email confirmation message...

CVE-2024-2727 Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system

HTML injection vulnerability affecting the CIGESv2 system, which allows an attacker to inject arbitrary code and modify elements of the website and email confirmation message...

CVE-2024-2727

CVE-2024-2727 is described as an HTML injection vulnerability in the CIGESv2 system (Stored XSS). The connected documents confirm the affected product (CIGESv2) and vulnerability class, noting ability to inject arbitrary code and modify website and email confirmation content. No concrete details ...

CVE-2024-2726 Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system

Stored Cross-Site Scripting Stored-XSS vulnerability affecting the CIGESv2 system, allowing an attacker to execute and store malicious javascript code in the application form without prior registration...

CVE-2024-2726 Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system

Stored Cross-Site Scripting Stored-XSS vulnerability affecting the CIGESv2 system, allowing an attacker to execute and store malicious javascript code in the application form without prior registration...

CVE-2024-2726

CVE-2024-2726 describes a Stored Cross-Site Scripting (Stored-XSS) vulnerability in the CIGESv2 system, where an attacker can store and execute malicious JavaScript in an application form without prior registration. The CVE details indicate the affected component is the CIGESv2 system, with a net...

CVE-2024-2725 Exposure of Sensitive Information vulnerability in the CIGESv2 system

Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/composer/installed.json and retrieve all installed packages used by the application...

CVE-2024-2725 Exposure of Sensitive Information vulnerability in the CIGESv2 system

Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/composer/installed.json and retrieve all installed packages used by the application...

CVE-2024-2725

CVE-2024-2725 affects the CIGESv2 system and describes an information-exposure vulnerability where a remote attacker can access the /vendor/composer/installed.json endpoint to enumerate all installed packages used by the application. Documented impact is information disclosure with CVSS v3.1 base...

CVE-2024-2724 SQL injection vulnerability in the CIGESv2 system

SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL query...

CVE-2024-2724 SQL injection vulnerability in the CIGESv2 system

SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL query...

CVE-2024-2724

CVE-2024-2724 affects the CIGESv2 system via SQL injection in the /ajaxServiciosAtencion.php endpoint, in the idServicio parameter. A remote attacker could use a crafted SQL query to retrieve all data from the database. Documented impact is data exposure (Confidentiality: HIGH); no exploits are d...

CVE-2024-2723 SQL injection vulnerability in the CIGESv2 system

SQL injection vulnerability in the CIGESv2 system, through /ajaxSubServicios.php, in the 'idServicio' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL query...

CVE-2024-2723 SQL injection vulnerability in the CIGESv2 system

SQL injection vulnerability in the CIGESv2 system, through /ajaxSubServicios.php, in the 'idServicio' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL query...

CVE-2024-2723

CVE-2024-2723 is a SQL injection in the CIGESv2 system, exploited via the /ajaxSubServicios.php endpoint’s idServicio parameter. This allows a remote attacker to retrieve all data stored in the database. No exploitation details are provided in the documents. Some sources note no public fix inform...

CVE-2024-2722 SQL injection vulnerability in the CIGESv2 system

SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL query...

CVE-2024-2722 SQL injection vulnerability in the CIGESv2 system

SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL query...

CVE-2024-2722

CVE-2024-2722 affects the CIGESv2 system via the /ajaxConfigTotem.php endpoint, where the id parameter is vulnerable to SQL injection. This condition could allow a remote attacker to retrieve all data stored in the database, as described in the NVD entry. The available references corroborate a da...