CVE-2025-1751

SQL Injection CIGES PUBLISHED

Description (CNA)

A SQL Injection vulnerability has been found in Ciges 2.15.5 from ATISoluciones. This vulnerability allows an attacker to retrieve, create, update and delete database via $idServicio parameter in /modules/ajaxBloqueaCita.php endpoint.

Affected (CNA)

Vendor / product	Versions
ATISoluciones / CIGES	affected 2.15.5

CWE

CWE-89

References

https://www.atisoluciones.com/incidentes-cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.