3 matches found
CVE-2026-55680 WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter
WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/socio/sistema/cadastrocobranca.php can place a quoted SQL expression in the codigo parameter, which extract$REQUEST passes into the WHERE codigo= clause of an UPDATE statement without...
CVE-2026-55680: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/socio/sistema/cadastrocobranca.php can place a quoted SQL expression in the codigo parameter, which extract$REQUEST passes into the WHERE codigo= clause of an UPDATE statement without...
