Lucene search
+L

2 matches found

NVD
NVD
added 2024/03/22 2:15 p.m.12 views

CVE-2024-2722

SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter. The exploitation of this vulnerability could allow a remote user to retrieve all data stored in the database by sending a specially crafted SQL query...

9.8CVSS9.7AI score0.00683EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/22 1:33 p.m.65 views

CVE-2024-2722

CVE-2024-2722 affects the CIGESv2 system via the /ajaxConfigTotem.php endpoint, where the id parameter is vulnerable to SQL injection. This condition could allow a remote attacker to retrieve all data stored in the database, as described in the NVD entry. The available references corroborate a da...

9.8CVSS9.7AI score0.00683EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder