Skip to content Dark Web Informer - Cyber Threat Intelligence

CVE-2025-1751: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

🚨 Critical Security Vulnerability
🆔 CVE-2025-1751
💣 CVSS Score: 9.8
📅 Published Date: 2025-02-27

⚠️ Details: A SQL Injection vulnerability has been found in Ciges 2.15.5 from ATISoluciones. This vulnerability allows an attacker to retrieve, create, update and delete database via $idServicio parameter in /modules/ajaxBloqueaCita.php endpoint.

🛠 References:
🔗 ATISoluciones: https://www.atisoluciones.com/incidentes-cve
🔗 NIST: https://nvd.nist.gov/vuln/detail/CVE-2025-1751

Latest