CVE-2025-1751: Atisoluciones Ciges

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A SQL Injection vulnerability has been found in Ciges 2.15.5 from ATISoluciones. This vulnerability allows an attacker to retrieve, create, update and delete database via $idServicio parameter in /modules/ajaxBloqueaCita.php endpoint.

Affected products

Published 2025-02-27. Last modified 2026-06-17.