Wegia

Wegia

162 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.1

CVE-2025-6696

Exploit
  • EPSS 0.05%
  • Veröffentlicht 26.06.2025 14:31:05
  • Zuletzt bearbeitet 01.07.2025 18:00:07

A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been classified as problematic. Affected is an unknown function of the file /html/atendido/Cadastro_Atendido.php of the component Cadastro de Atendio. The manipulation of the argument N...

4.1

CVE-2025-6695

Exploit
  • EPSS 0.05%
  • Veröffentlicht 26.06.2025 13:31:06
  • Zuletzt bearbeitet 01.07.2025 18:18:08

A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0 and classified as problematic. This issue affects some unknown processing of the file /html/matPat/adicionar_categoria.php of the component Additional Categoria. The manipulation of the argumen...

4.1

CVE-2025-6694

Exploit
  • EPSS 0.04%
  • Veröffentlicht 26.06.2025 13:31:05
  • Zuletzt bearbeitet 01.07.2025 19:03:59

A vulnerability has been found in LabRedesCefetRJ WeGIA 3.4.0 and classified as problematic. This vulnerability affects unknown code of the file /html/matPat/adicionar_unidade.php of the component Adicionar Unidade. The manipulation of the argument I...

9.8

CVE-2025-52474

Exploit
  • EPSS 0.05%
  • Veröffentlicht 19.06.2025 03:40:47
  • Zuletzt bearbeitet 02.07.2025 16:18:45

WeGIA is a web manager for charitable institutions. Prior to version 3.4.2, a SQL Injection vulnerability was identified in the id parameter of the /WeGIA/controle/control.php endpoint. This vulnerability allows attacker to manipulate SQL queries and...

9.8

CVE-2025-50201

Exploit
  • EPSS 29.52%
  • Veröffentlicht 19.06.2025 03:34:29
  • Zuletzt bearbeitet 02.07.2025 16:21:03

WeGIA is a web manager for charitable institutions. Prior to version 3.4.2, an OS Command Injection vulnerability was identified in the /html/configuracao/debug_info.php endpoint. The branch parameter is not properly sanitized before being concatenat...

9.8

CVE-2025-46828

Exploit
  • EPSS 0.57%
  • Veröffentlicht 07.05.2025 17:34:52
  • Zuletzt bearbeitet 02.07.2025 16:30:44

WeGIA is a web manager for charitable institutions. An unauthenticated SQL Injection vulnerability was identified in versions up to and including 3.3.0 in the endpoint `/html/socio/sistema/get_socios.php`, specifically in the query parameter. This i...

9.8

CVE-2025-30367

Exploit
  • EPSS 0.27%
  • Veröffentlicht 27.03.2025 16:30:34
  • Zuletzt bearbeitet 10.04.2025 14:39:09

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.2.6 in the nextPage parameter of the /WeGIA/controle/control.php endpoint. This vulnerability allows attacker to manipulate SQL qu...

5.4

CVE-2025-30366

Exploit
  • EPSS 0.14%
  • Veröffentlicht 27.03.2025 16:29:45
  • Zuletzt bearbeitet 10.04.2025 14:51:47

WeGIA is a Web manager for charitable institutions. Versions prior to 3.2.8 are vulnerable to stored cross-site scripting. This vulnerability allows unauthorized scripts to be executed within the user's browser context. Stored XSS is particularly cri...

9.8

CVE-2025-30365

Exploit
  • EPSS 0.58%
  • Veröffentlicht 27.03.2025 16:28:45
  • Zuletzt bearbeitet 10.04.2025 15:02:52

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.2.8 in the endpoint /WeGIA/html/socio/sistema/controller/query_geracao_auto.php, specifically in the query parameter. This vulnera...

9.8

CVE-2025-30364

Exploit
  • EPSS 0.63%
  • Veröffentlicht 27.03.2025 16:27:26
  • Zuletzt bearbeitet 10.04.2025 15:08:41

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.2.8 in the endpoint /WeGIA/html/funcionario/remuneracao.php, in the id_funcionario parameter. This vulnerability allows the execut...