6 matches found
CVE-2026-54767
WeGIA is a web manager for charitable institutions. Prior to 3.8.5, web/html/socio/sistema/controller/deletarsocios.php exposes an unauthenticated GET endpoint whose chave parameter is checked only against a hardcoded chavecorreta value embedded in the public source repository. A remote attacker...
CVE-2026-54767 WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php
WeGIA is a web manager for charitable institutions. Prior to 3.8.5, web/html/socio/sistema/controller/deletarsocios.php exposes an unauthenticated GET endpoint whose chave parameter is checked only against a hardcoded chavecorreta value embedded in the public source repository. A remote attacker...
EUVD-2026-82576
WeGIA is a web manager for charitable institutions. Prior to 3.8.5, web/html/socio/sistema/controller/deletarsocios.php exposes an unauthenticated GET endpoint whose chave parameter is checked only against a hardcoded chavecorreta value embedded in the public source repository. A remote attacker...
SQL Injection Vulnerability in qwadmin of Beijing Chave Network Technology Co. Ltd (CNVD-2021-37973)
qwadmin is a backend management system based on thinkphp with aceadmin template. Beijing Chave Network Technology Co. qwadmin has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
SQL Injection Vulnerability in qwadmin of Beijing Chave Network Technology Co. Ltd (CNVD-2021-37972)
qwadmin is a backend management system based on thinkphp with aceadmin template. Beijing Chave Network Technology Co. qwadmin has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
Beijing Chave Network Technology Co., Ltd. qwadmin suffers from SQL injection vulnerability.
qwadmin is a backend management system based on thinkphp with aceadmin template. Beijing Chave Network Technology Co. qwadmin has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...