CVE-2026-61673

WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in web/html/memorando/listardespachos.php results from unsafe handling of the texto field. The affected flow spans web/controle/memorando/DespachoControle.php and...

EUVD-2026-113398

WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in web/html/memorando/listardespachos.php results from unsafe handling of the texto field. The affected flow spans web/controle/memorando/DespachoControle.php and...

CVE-2026-61673

WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in "web/html/memorando/listardespachos.php" results from unsafe handling of the "texto" field. The affected flow spans "web/controle/memorando/DespachoControle.php" and...

PT-2026-132848

WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in web/html/memorando/listar despachos.php results from unsafe handling of the texto field. The affected flow spans web/controle/memorando/DespachoControle.php and...

CVE-2026-55684 WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastrocobrancasgeracao.php endpoint accepts form-encoded POST data through extract$REQUEST and interpolates codigo, descricao, dataemissao, datavencimento, datapagamento, valor,...

EUVD-2026-101622

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, an authenticated user with access to the Material & Patrimônio module can submit idproduto to web/html/matPat/restaurarprodutodesocultar.php, where a second extract$REQUEST overwrites the value previously sanitized by intval. The...

PT-2024-35245 · Unknown · Wibergs Web Csv To Html

Name of the Vulnerable Software and Affected Versions: Wibergs Web CSV to html versions n/a through 3.04 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can lead to harmful files being uploaded...

SAP NetWeaver cross-site scripting vulnerabilities

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform mainly for SAP applications to provide development and runtime environment. A cross-site scripting vulnerability exists in SAP NetWeaver Knowledge Management XMLEditor, which stems...

BMC Footprints Service Core Cross-Site Scripting Vulnerability

BMC Footprints Service Core is a suite of IT service and asset automation management platforms from BMC Software, USA. A cross-site scripting vulnerability exists in BMC Footprints Service Core version 11.5. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

XSSYA v2.0 - Cross Site Scripting Scanner & Vulnerability Confirmation

XSSYA Cross Site Scripting Scanner & Vulnerability Confirmation written in python scripting language confirm the XSS Vulnerability in two method first work by execute the payload encoded to bypass Web Application Firewall which is the first method request and responseif it respond 200 it turn...