PT-2024-21752 · Cigesv2 · Cigesv2

Name of the Vulnerable Software and Affected Versions: CIGESv2 affected versions not specified Description: The issue is related to a SQL injection vulnerability in the CIGESv2 system. This vulnerability can be exploited through the /ajaxConfigTotem.php endpoint, specifically in the id parameter...

CIGESv2 SQL注入漏洞

CIGESv2 is a queue and reservation management system from CIGESv2. CIGESv2 suffers from an SQL injection vulnerability that stems from an SQL injection vulnerability in the parameter id of /ajaxConfigTotem.php...

CIGESv2 信息泄露漏洞

CIGESv2 is a queue and reservation management system from CIGESv2, Inc. CIGESv2 suffers from an information disclosure vulnerability that stems from the presence of an information disclosure vulnerability. Allows an attacker to access /vender/composer/installed.json and retrieve all installed...

PT-2024-21777 · Cigesv2 · Cigesv2

Name of the Vulnerable Software and Affected Versions: CIGESv2 system affected versions not specified Description: The issue is a Stored Cross-Site Scripting Stored-XSS vulnerability affecting the CIGESv2 system. This allows an attacker to execute and store malicious javascript code in the...

PT-2024-21784 · Cigesv2 · Cigesv2

Name of the Vulnerable Software and Affected Versions: CIGESv2 system affected versions not specified Description: The issue allows an attacker to inject arbitrary code and modify elements of the website and email confirmation message. This is due to an HTML injection vulnerability affecting the...

CIGESv2 跨站脚本漏洞

CIGESv2 is a queue and reservation management system from CIGESv2, Inc. CIGESv2 suffers from a cross-site scripting vulnerability that stems from the presence of an HTML injection vulnerability. An attacker can exploit the vulnerability to inject arbitrary code and modify website and email...

CIGESv2 SQL注入漏洞

CIGESv2 is a queue and reservation management system from CIGESv2. CIGESv2 suffers from an SQL injection vulnerability that stems from an SQL injection vulnerability in the parameter idServicio in /ajaxSubServicios.php...

CIGESv2 SQL注入漏洞

CIGESv2 is a queue and reservation management system from CIGESv2. CIGESv2 suffers from an SQL injection vulnerability that stems from an SQL injection vulnerability in the parameter idServicio of /ajaxServiciosAtencion.php...

PT-2024-21790 · Cigesv2 · Cigesv2

Name of the Vulnerable Software and Affected Versions: CIGESv2 system affected versions not specified Description: The issue is related to an information exposure vulnerability in the CIGESv2 system. This could allow a local attacker to intercept traffic due to the lack of proper implementation o...

CIGESv2 信息泄露漏洞

CIGESv2 is a queue and reservation management system from CIGESv2. CIGESv2 suffers from an information disclosure vulnerability that stems from the lack of a proper implementation of the TLS protocol, allowing a local attacker to intercept traffic...

PT-2024-21771 · Cigesv2 · Cigesv2

Name of the Vulnerable Software and Affected Versions: CIGESv2 affected versions not specified Description: The issue is related to a SQL injection vulnerability in the CIGESv2 system. This vulnerability can be exploited through the /ajaxServiciosAtencion.php endpoint, specifically in the...