Rezultati pretraživanja za 'Proizvođač: wegia'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-35396 | 6.1 | WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with met | 2026-04-09 17:40:03 | 2026-04-06 21:16:21 |
| CVE-2026-35398 | 6.1 | WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with met | 2026-04-09 17:39:41 | 2026-04-06 21:16:21 |
| CVE-2026-35399 | 6.1 | WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, a stored XSS vulnerability allows an attacker to inject malicious scripts through a backup filename. This could lead to unauthorized execution of malicious code in the victim's brows | 2026-04-09 17:39:04 | 2026-04-06 21:16:21 |
| CVE-2026-35472 | 6.1 | WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with met | 2026-04-09 17:38:02 | 2026-04-06 21:16:22 |
| CVE-2026-33991 | 8.8 | WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file `html/socio/sistema/deletar_tag.php` uses `extract($_REQUEST)` on line 14 and directly concatenates the `$id_tag` variable into SQL queries on lines 16-17 without pr | 2026-03-31 20:57:55 | 2026-03-27 23:17:13 |
| CVE-2026-33133 | 7.2 | WeGIA is a web manager for charitable institutions. In versions 3.6.5 and 3.6.6, the loadBackupDB() function imports SQL files from uploaded backup archives without any content validation. An attacker can craft a backup archive containing arbitrary S | 2026-03-20 19:29:20 | 2026-03-20 11:18:03 |
| CVE-2026-33134 | 9.3 | WeGIA is a web manager for charitable institutions. Versions 3.6.5 and below contain an authenticated SQL Injection vulnerability in the html/matPat/restaurar_produto.php endpoint. The vulnerability allows an authenticated attacker to inject arbitrar | 2026-03-20 19:26:28 | 2026-03-20 11:18:03 |
| CVE-2026-33135 | 9.3 | WeGIA is a web manager for charitable institutions. Versions 3.6.6 and below have a Reflected Cross-Site Scripting (XSS) vulnerability in the novo_memorandoo.php endpoint. An attacker can inject arbitrary JavaScript into the sccs GET parameter, which | 2026-03-20 19:25:45 | 2026-03-20 11:18:03 |
| CVE-2026-33136 | 9.3 | WeGIA is a web manager for charitable institutions. Versions 3.6.6 and below have a Reflected Cross-Site Scripting (XSS) vulnerability in the listar_memorandos_ativos.php endpoint. An attacker can inject arbitrary JavaScript or HTML tags into the scc | 2026-03-20 19:23:40 | 2026-03-20 11:18:03 |
| CVE-2026-31894 | 7.5 | WeGIA is a web manager for charitable institutions. In 3.6.5, The patched loadBackupDB() extracts tar.gz archives to a temporary directory using PHP's PharData class, then uses glob() and file_get_contents() to read SQL files from the extracted conte | 2026-03-13 20:22:24 | 2026-03-11 20:16:15 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/17
Zapisa po stranici: