CVE-2024-2727

概要

参考情報

• incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cigesv2-system · Third Party Advisory

ciges のその他の脆弱性

• CVE-2024-2728中 5.5Information exposure vulnerability in the CIGESv2 system. This vulnerability could allow a local attacker to intercept traffic due to the la…
• CVE-2024-2726中 6.1Stored Cross-Site Scripting (Stored-XSS) vulnerability affecting the CIGESv2 system, allowing an attacker to execute and store malicious jav…
• CVE-2024-2725高 7.5Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/composer/installed.json and retr…
• CVE-2024-2724高 7.5SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' parameter. The exploitation of th…
• CVE-2024-2723高 7.5SQL injection vulnerability in the CIGESv2 system, through /ajaxSubServicios.php, in the 'idServicio' parameter. The exploitation of this vu…