CVE-2026-55680

The WeGIA web manager for charitable institutions is vulnerable to an unauthenticated SQL injection in the web/html/socio/sistema/cadastro_cobranca.php component. The root cause is the lack of validation or parameter binding when processing the codigo parameter via extract($_REQUEST), allowing an...

CVE-2026-55683 WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastrocobranca.php endpoint accepts POST input through extract$REQUEST and directly incorporates valor, valorpago, idpessoa, idsocio, and idsociotipo into UPDATE, INSERT, and SELECT...