Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: wegia'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-31895 8.8 WeGIA is a web manager for charitable institutions. Prior to version 3.6.6, WeGIA (Web gerenciador para instituições assistenciais) contains a SQL injection vulnerability in html/matPat/restaurar_produto.php. The id_produto parameter from $_GET is di 2026-03-13 20:06:31
CVE-2026-31896 9.8 WeGIA is a web manager for charitable institutions. Prior to version 3.6.6, a critical SQL injection vulnerability exists in the WeGIA application. The remover_produto_ocultar.php script uses extract($_REQUEST) to populate local variables and then di 2026-03-13 20:05:49
CVE-2026-28408 9.8 WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, the script in adicionar_tipo_docs_atendido.php does not go through the project's central controller and does not have its own authentication and permission checks. A maliciou 2026-03-03 18:22:19
CVE-2026-28409 10.0 WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, a critical Remote Code Execution (RCE) vulnerability exists in the WeGIA application's database restoration functionality. An attacker with administrative access (which can b 2026-03-03 18:20:07
CVE-2026-28411 9.8 WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, an unsafe use of the `extract()` function on the `$_REQUEST` superglobal allows an unauthenticated attacker to overwrite local variables in multiple PHP scripts. This vulnera 2026-03-03 17:56:18
CVE-2026-23731 4.3 WeGIA is a web manager for charitable institutions. Prior to 3.6.2, The web application is vulnerable to clickjacking attacks. The WeGIA application does not send any defensive HTTP headers related to framing protection. In particular, X-Frame-Option 2026-01-30 18:30:32
CVE-2026-23730 6.1 WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with met 2026-01-30 18:30:19
CVE-2026-23729 6.1 WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with met 2026-01-30 18:30:09
CVE-2026-23728 6.1 WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with met 2026-01-30 18:29:58
CVE-2026-23727 6.1 WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with met 2026-01-30 18:29:51
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/17
Zapisa po stranici: