The vulnerability in the WeGIA web manager’s script /html/funcionario/dependente_editarEndereco.php allows a perpetrator to disclose confidential information, increase their privileges, or execute arbitrary code.

The vulnerability in the WeGIA web manager’s script /html/funcionario/dependenteeditarEndereco.php relates to the failure to protect the SQL query structure when processing the parameter idatendidofamiliares. Exploiting this vulnerability can allow an attacker to disclose confidential information...

The vulnerability of the personalizacao.php script of the WeGIA web manager allows attackers to perform cross-site scripting attacks.

The vulnerability of the personalizacao.php script of the WeGIA web manager is related to the failure to protect the structure of the web page when processing the err parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the WeGIA web manager’s personalizacao_imagem.php script allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the personalizacaoimagem.php web handler of the WeGIA browser is related to the failure to protect the website structure when processing the err parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability in the WeGIA web manager’s script pre_cadastro_atendido.php allows a violator to perform cross-site scripting attacks.

The vulnerability in the WeGIA web manager’s script precadastroatendido.php is related to insufficient protection of the website structure when processing the msge parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the WeGIA web manager for charitable organizations stems from the failure to implement measures to protect the SQL query structure, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the WeGIA web manager for charitable organizations is related to the failure to implement measures to protect the SQL query structure when processing the id parameter. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

The vulnerability of the WeGIA web manager, related to the failure to protect the SQL query structure, allows attackers to execute arbitrary SQL code.

The vulnerability of the WeGIA web manager is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

The vulnerability of the WeGIA web manager for charitable organizations, which arises due to the failure to take measures to neutralize special elements, allows a violator to execute arbitrary commands.

The vulnerability of the WeGIA web manager exists due to the lack of measures taken to neutralize special elements during the processing of the branch parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with user privileges of the web server www-data...

The vulnerability of the WeGIA web manager, related to the failure to protect the SQL query structure, allows attackers to execute arbitrary SQL code.

The vulnerability of the WeGIA web manager is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

The vulnerability of the WeGIA web manager, related to the failure to protect the structure of web pages, allows attackers to perform cross-site scripting attacks.

The vulnerability of the WeGIA web manager is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability in the adicionar_especie.php script of the WeGIA web manager allows a attacker to perform cross-site scripting (XSS) attacks.

The vulnerability of the adicionarespecie.php script of the WeGIA web manager is related to the lack of measures taken to protect the website structure when processing the especie parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotel...

The vulnerability of the personalizacao_selecao.php web manager of WeGIA allows attackers to perform cross-site scripting attacks.

The vulnerability of the personalizacaoselecao.php web handler of the WeGIA browser is related to the lack of measures taken to protect the website structure when processing the nomecar parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks XSS...

The vulnerability of the control.php script of the WeGIA web manager allows a hacker to execute arbitrary code.

The vulnerability of the control.php script of the WeGIA web manager is related to the failure to protect the SQL query structure when processing the cargo parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the personalizacao_selecao.php web manager of WeGIA allows attackers to perform cross-site scripting attacks.

The vulnerability of the personalizacaoselecao.php web handler of the WeGIA browser is related to the failure to protect the website structure when processing the id parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability in the adicionar_raca.php script of the WeGIA web manager allows a hacker to perform cross-site scripting attacks.

The vulnerability of the adicionarraca.php script of the WeGIA web manager is related to the failure to protect the website structure when processing the raca parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the cadastro_adotante.php web manager of WeGIA allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the cadastroadotante.php script of the WeGIA web manager is related to the lack of measures taken to protect the structure of the web page when processing the cpf parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS...

The vulnerability in the control.php script of the WeGIA web manager allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability in the control.php script of the WeGIA web manager is related to the failure to protect the structure of the web page when processing the descricaoemergencia parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the index.php file of the WeGIA web manager allows attackers to perform cross-site scripting attacks.

The vulnerability of the index.php file of the WeGIA web manager is related to the failure to protect the structure of the web page when processing the erro parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

WeGIA Cross-Site Scripting Vulnerability (CNVD-2025-17259)

WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the adicionarraca.php endpoint raca parameter, no details of the vulnerability are provided at this time...

WeGIA Cross-Site Scripting Vulnerability

WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the parameter err in the file personalizacao.php, for which no detailed vulnerability details are availab...

WeGIA Cross-Site Scripting Vulnerability (CNVD-2025-17254)

WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the precadastroatendido.php endpoint, for which no detailed vulnerability details are currently available...