CVE-2024-2723

Summary

CVE-2024-2723 is a newly-discovered SQL injection vulnerability affecting the CIGESv2 system. The issue is located within the "/ajaxSubServicios.php" file, specifically the 'idServicio' parameter. A remote user can potentially exploit this vulnerability by sending crafted SQL queries, granting them unauthorized access to retrieve all data stored in the system's database.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.