Wegia

Wegia

147 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2025-62598

Exploit
  • EPSS 0.04%
  • Veröffentlicht 21.10.2025 16:34:57
  • Zuletzt bearbeitet 22.10.2025 14:19:55

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to version 3.5.1, a reflected cross-site scripting (XSS) vulnerability was identified in the editar_info_pessoal.php endpoint of the WeGIA applicati...

6.1

CVE-2025-62597

Exploit
  • EPSS 0.05%
  • Veröffentlicht 21.10.2025 16:34:19
  • Zuletzt bearbeitet 24.10.2025 15:43:55

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to version 3.5.1, a reflected cross-site scripting (XSS) vulnerability was identified in the editar_info_pessoal.php endpoint of the WeGIA applicati...

6.1

CVE-2025-62361

Exploit
  • EPSS 0.03%
  • Veröffentlicht 13.10.2025 21:27:38
  • Zuletzt bearbeitet 20.10.2025 15:38:20

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.0, an Open Redirect vulnerability was identified in the control.php endpoint of the WeGIA application, specifically in the nextPage parameter...

8.8

CVE-2025-62360

Exploit
  • EPSS 0.03%
  • Veröffentlicht 13.10.2025 21:24:48
  • Zuletzt bearbeitet 20.10.2025 16:04:04

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Prior to 3.5.1, a SQL Injection vulnerability was identified in the /html/funcionario/dependente_documento.php endpoint, specifically in the id_dependente ...

6.1

CVE-2025-62359

Exploit
  • EPSS 0.04%
  • Veröffentlicht 13.10.2025 21:21:48
  • Zuletzt bearbeitet 20.10.2025 16:05:26

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.0, a Reflected Cross-Site Scripting (XSS) vulnerability was identified in the /pet/profile_pet.php?id_pet= endpoint of the WeGIA application....

6.1

CVE-2025-62358

Exploit
  • EPSS 0.05%
  • Veröffentlicht 13.10.2025 21:16:40
  • Zuletzt bearbeitet 20.10.2025 16:02:20

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, the log parameter in configuracao_geral.php is vulnerable to Reflected Cross-Site Scripting (XSS). An attacker can inject arbitrary JavaSc...

8.8

CVE-2025-62179

Exploit
  • EPSS 0.03%
  • Veröffentlicht 13.10.2025 21:13:59
  • Zuletzt bearbeitet 20.10.2025 16:01:53

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, a SQL Injection vulnerability was identified in the /html/funcionario/cadastro_funcionario_pessoa_existente.php endpoint, specifically in ...

5.4

CVE-2025-62178

Exploit
  • EPSS 0.03%
  • Veröffentlicht 13.10.2025 21:12:16
  • Zuletzt bearbeitet 20.10.2025 16:06:38

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, a Reflected Cross-Site Scripting (XSS) vulnerability was identified in the /html/atendido/cadastro_atendido_parentesco_pessoa_nova.php end...

8.8

CVE-2025-62177

Exploit
  • EPSS 0.03%
  • Veröffentlicht 13.10.2025 21:09:29
  • Zuletzt bearbeitet 20.10.2025 16:06:57

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, a SQL Injection vulnerability was identified in the /html/funcionario/dependente_listar.php endpoint, specifically in the id_funcionario p...

7.5

CVE-2025-61665

Exploit
  • EPSS 0.2%
  • Veröffentlicht 02.10.2025 20:39:09
  • Zuletzt bearbeitet 07.10.2025 15:41:23

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Broken Access Control vulnerability, identified in the get_relatorios_socios.php endpoint. This vulnerability allows unauthenticated atta...