Rezultati pretraživanja za 'Proizvođač: wegia'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-61665 | 7.5 | WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Broken Access Control vulnerability, identified in the get_relatorios_socios.php endpoint. This vulnerability allows unauthenticated atta | 2026-10-12 15:10:00 | 2025-10-02 21:16:01 |
| CVE-2025-61606 | 6.1 | WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an Open Redirect vulnerability, identified in the control.php endpoint, specifically in the nextPage parameter (metodo=listarUmnomeClasse=F | 2026-10-12 15:10:00 | 2025-10-02 21:16:01 |
| CVE-2025-61605 | 9.8 | WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an SQL Injection vulnerability which was identified in the /pet/profile_pet.php endpoint, specifically in the id_pet parameter. This vulner | 2026-10-12 15:10:00 | 2025-10-02 21:16:01 |
| CVE-2025-61604 | 7.1 | WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Cross-Site Request Forgery (CSRF) vulnerability. The delete operation for the Almoxarifado entity is exposed via HTTP GET without CSRF pr | 2026-10-12 15:10:00 | 2025-10-02 20:15:35 |
| CVE-2025-61603 | 9.8 | WeGIA is a Web manager for charitable institutions. Versions 3.4.12 and below include an SQL Injection vulnerability which was identified in the /controle/control.php endpoint, specifically in the descricao parameter. This vulnerability allows attack | 2026-10-12 15:10:00 | 2025-10-02 20:15:35 |
| CVE-2025-59939 | 8.8 | WeGIA is a Web manager for charitable institutions. Prior to version 3.5.0, WeGIA is vulnerable to SQL Injection attacks in the control.php endpoint with the following parameters: nomeClasse=ProdutoControle&metodo=excluir&id_produto=[malicious comman | 2026-10-09 10:10:00 | 2025-09-27 01:15:43 |
| CVE-2026-35473 | 6.1 | WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with met | 2026-04-10 20:24:49 | 2026-04-06 22:16:24 |
| CVE-2026-35474 | 6.1 | WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, open redirect has been found in WeGIA webapp. The redirect parameter is taken directly from $_GET with no URL validation or whitelist check, then used verbatim in a header("Location: | 2026-04-10 20:24:16 | 2026-04-06 22:16:24 |
| CVE-2026-35475 | 6.1 | WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, the redirect parameter is taken directly from $_GET with no URL validation or whitelist check, then used verbatim in a header("Location: ...") call. This vulnerability is fixed in 3. | 2026-04-10 20:18:42 | 2026-04-06 22:16:24 |
| CVE-2026-35395 | 8.8 | WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, WeGIA (Web gerenciador para instituições assistenciais) contains a SQL injection vulnerability in dao/memorando/DespachoDAO.php. The id_memorando parameter is extracted from $_REQUES | 2026-04-09 17:40:26 | 2026-04-06 21:16:21 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/17
Zapisa po stranici: