638 matches found
CVE-2025-6697
A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /html/matPat/adicionartipoEntrada.php of the component Adicionar tipo. The manipulation of the argument Insira o novo tipo leads to...
CVE-2025-6698
A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /html/matPat/adicionartipoSaida.php of the component Adicionar tipo. The manipulation of the argument Insira o novo tipo leads to cross site...
CVE-2025-6696
A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been classified as problematic. Affected is an unknown function of the file /html/atendido/CadastroAtendido.php of the component Cadastro de Atendio. The manipulation of the argument Nome/Sobrenome leads to cross site scripting. It ...
CVE-2025-53091 WeGIA has Unauthenticated Time-Based Blind SQL Injection in almox Parameter
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Time-Based Blind SQL Injection vulnerability was discovered in version 3.3.3 the almox parameter of the /controle/getProdutosPorAlmox.php endpoint. This issue allows any unauthenticated...
CVE-2025-53091 WeGIA has Unauthenticated Time-Based Blind SQL Injection in almox Parameter
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Time-Based Blind SQL Injection vulnerability was discovered in version 3.3.3 the almox parameter of the /controle/getProdutosPorAlmox.php endpoint. This issue allows any unauthenticated...
CVE-2025-53091
WeGIA is vulnerable to an unauthenticated Time-Based Blind SQL Injection in the almox parameter of the /controle/getProdutosPorAlmox.php endpoint (WeGIA version 3.3.3). The issue, caused by lack of input validation, allows an attacker to inject arbitrary SQL queries and potentially access or exfi...
CVE-2025-6698
A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /html/matPat/adicionartipoSaida.php of the component Adicionar tipo. The manipulation of the argument Insira o novo tipo leads to cross site...
CVE-2025-6696
A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been classified as problematic. Affected is an unknown function of the file /html/atendido/CadastroAtendido.php of the component Cadastro de Atendio. The manipulation of the argument Nome/Sobrenome leads to cross site scripting. It ...
CVE-2025-6697 LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoEntrada.php cross site scripting
A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /html/matPat/adicionartipoEntrada.php of the component Adicionar tipo. The manipulation of the argument Insira o novo tipo leads to...
CVE-2025-6696
CVE-2025-6696 affects LabRedesCefetRJ WeGIA 3.4.0 in the Cadastro de Atendio area, via file /html/atendido/Cadastro_Atendido.php. The root cause is inadequate input handling for Nome/Sobrenome, enabling cross-site scripting (XSS) that can be exploited remotely. The vulnerability is documented as ...
CVE-2025-6695
CVE-2025-6695 affects LabRedesCefetRJ WeGIA 3.4.0. The vulnerability is in the file /html/matPat/adicionar_categoria.php, in the handling of the argument “Insira a nova categoria,” leading to cross-site scripting (XSS). It can be triggered remotely; the exploit has been disclosed publicly. The PT...
CVE-2025-6694
CVE-2025-6694 affects LabRedesCefetRJ WeGIA 3.4.0. The vulnerability resides in the Adicionar Unidade component, specifically the file /html/matPat/adicionar_unidade.php, where input in the Insira a nova unidade parameter can be manipulated to trigger cross-site scripting. Exploitation is describ...
PT-2025-26968 · Unknown · Labredescefetrj Wegia
Name of the Vulnerable Software and Affected Versions: LabRedesCefetRJ WeGIA version 3.4.0 Description: A vulnerability was found in the processing of the file /html/matPat/adicionar categoria.php of the component Additional Categoria. The manipulation of the argument Insira a nova categoria lead...
VulnCheck KEV: CVE-2018-16836
Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated attackers to read and execute arbitrary files outside of the service root path, as demonstrated by a /theme/default/img/%2e%2e/..//etc/passwd URI...
CVE-2025-22293
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in gutentor Gutentor gutentor allows DOM-Based XSS.This issue affects Gutentor: from n/a through = 3.4.3...
CVE-2025-24754
Missing Authorization vulnerability in favethemes Houzez houzez.This issue affects Houzez: from n/a through = 3.4.0...
CVE-2025-24747
Missing Authorization vulnerability in favethemes Houzez houzez.This issue affects Houzez: from n/a through = 3.4.0...
CVE-2024-31301
Cross-Site Request Forgery CSRF vulnerability in Themeisle Multiple Page Generator Plugin – MPG.This issue affects Multiple Page Generator Plugin – MPG: from n/a through 3.4.0...