Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: wegia'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2025-53527 9.8 WeGIA is a web manager for charitable institutions. A Time-Based Blind SQL Injection vulnerability was discovered in the almox parameter of the /controle/relatorio_geracao.php endpoint. This issue allows attacker to inject arbitrary SQL queries, pote 2025-07-10 21:16:47
CVE-2025-53529 9.8 WeGIA is a web manager for charitable institutions. An SQL Injection vulnerability was identified in the /html/funcionario/profile_funcionario.php endpoint. The id_funcionario parameter is not properly sanitized or validated before being used in a SQ 2025-07-10 21:16:36
CVE-2025-53530 7.5 WeGIA is a web manager for charitable institutions. The Wegia server has a vulnerability that allows excessively long HTTP GET requests to a specific URL. This issue arises from the lack of validation for the length of the errorstr parameter. Tests c 2025-07-10 21:16:15
CVE-2025-53531 7.5 WeGIA is a web manager for charitable institutions. The Wegia server has a vulnerability that allows excessively long HTTP GET requests to a specific URL. This issue arises from the lack of validation for the length of the fid parameter. Tests confir 2025-07-10 20:49:40
CVE-2025-53377 6.1 WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the cadastro_dependente_pessoa_nova.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malici 2025-07-10 14:56:26
CVE-2025-53091 9.8 WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Time-Based Blind SQL Injection vulnerability was discovered in version 3.3.3 the almox parameter of the `/controle/getProdutosPorAlmox.php` end 2025-07-08 14:48:01
CVE-2025-46828 9.8 WeGIA is a web manager for charitable institutions. An unauthenticated SQL Injection vulnerability was identified in versions up to and including 3.3.0 in the endpoint `/html/socio/sistema/get_socios.php`, specifically in the query parameter. This i 2025-07-02 16:30:44
CVE-2025-50201 9.8 WeGIA is a web manager for charitable institutions. Prior to version 3.4.2, an OS Command Injection vulnerability was identified in the /html/configuracao/debug_info.php endpoint. The branch parameter is not properly sanitized before being concatenat 2025-07-02 16:21:03
CVE-2025-52474 9.8 WeGIA is a web manager for charitable institutions. Prior to version 3.4.2, a SQL Injection vulnerability was identified in the id parameter of the /WeGIA/controle/control.php endpoint. This vulnerability allows attacker to manipulate SQL queries and 2025-07-02 16:18:45
CVE-2025-6694 4.0 A vulnerability has been found in LabRedesCefetRJ WeGIA 3.4.0 and classified as problematic. This vulnerability affects unknown code of the file /html/matPat/adicionar_unidade.php of the component Adicionar Unidade. The manipulation of the argument I 2025-07-01 19:03:59
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/17
Zapisa po stranici: