Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: wegia'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2025-23037 5.4 WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the `control.php` endpoint of the WeGIA application. This vulnerability allow 2025-04-09 18:25:13
CVE-2024-57030 8.1 Wegia < 3.2.0 is vulnerable to Cross Site Scripting (XSS) in /geral/documentos_funcionario.php via the id parameter. 2025-04-09 18:24:20
CVE-2025-29782 5.4 WeGIA is Web manager for charitable institutions A Stored Cross-Site Scripting (XSS) vulnerability was identified in the `adicionar_tipo_docs_atendido.php` endpoint in versions of the WeGIA application prior to 3.2.17. This vulnerability allows attac 2025-03-25 20:12:23
CVE-2024-57031 9.8 WeGIA < 3.2.0 is vulnerable to SQL Injection in /funcionario/remuneracao.php via the id_funcionario parameter. 2025-03-24 18:15:21
CVE-2024-57032 9.8 WeGIA < 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application does not validate the value of the old password, so it is possible to change the password by placing any value in the senha_antiga field. 2025-03-19 15:15:52
CVE-2024-57035 9.8 WeGIA v3.2.0 is vulnerable to SQL Injection viathe nextPage parameter in /controle/control.php. 2025-03-18 18:15:27
CVE-2024-57034 9.8 WeGIA < 3.2.0 is vulnerable to SQL Injection in query_geracao_auto.php via the query parameter. 2025-03-14 18:15:30
CVE-2025-27419 7.5 WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Denial of Service (DoS) vulnerability exists in WeGIA. This vulnerability allows any unauthenticated user to cause the server to become unresponsive by 2025-03-07 19:45:52
CVE-2025-27499 6.1 WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Stored Cross-Site Scripting (XSS) vulnerability was identified in the processa_edicao_socio.php endpoint of the WeGIA application. This vulnerability al 2025-03-06 12:21:35
CVE-2025-27096 9.8 WeGIA is a Web Manager for Institutions with a focus on Portuguese language. A SQL Injection vulnerability was discovered in the WeGIA application, personalizacao_upload.php endpoint. This vulnerability allow an authorized attacker to execute arbitra 2025-02-28 19:18:34
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/17
Zapisa po stranici: