CVE-2024-8161 — SQL injection vulnerability in CIGESv2 system
SQL injection vulnerability in ATISolutions CIGES affecting versions lower than 2.15.5. This vulnerability allows a remote attacker to send a specially crafted SQL query to the …
Published: 2024-08-26 · CVSS: 9.8 · CVSS 3.1
SQL injection vulnerability in ATISolutions CIGES affecting versions lower than 2.15.5. This vulnerability allows a remote attacker to send a specially crafted SQL query to the /modules/ajaxServiciosCentro.php point in the idCentro parameter and retrieve all the information stored in the database.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7