Lucene search
K

110 matches found

RedhatCVE
RedhatCVE
added 2026/05/28 8:13 p.m.10 views

CVE-2026-45335

WeGIA is a web manager for charitable institutions. Prior to 3.7.3, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and nomeClasse=InternoControle...

5.4CVSS5.9AI score0.0015EPSS
Exploits0References1
NVD
NVD
added 2026/04/06 9:16 p.m.3 views

CVE-2026-35398

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos & listarIdNome and...

6.1CVSS0.00228EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/04/06 9:12 p.m.13 views

CVE-2026-35473 WeGIA - Open Redirect - IentradaControle - listarId() - Unvalidated $_GET['nextPage']

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarId and nomeClasse=IentradaControle. T...

5.1CVSS0.00183EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/02/26 12:0 a.m.4 views

PT-2026-22159

Name of the Vulnerable Software and Affected Versions ZenTaoPMS versions 18.11 through 21.6.beta Description ZenTaoPMS versions 18.11 through 21.6.beta contain a Directory Traversal flaw in the /module/ai/control.php file. This allows attackers to execute arbitrary code by uploading a specially...

9.8CVSS6.2AI score0.02293EPSS
Exploits0References6
CVE
CVE
added 2026/02/26 12:0 a.m.9 views

CVE-2025-50857

ZenTaoPMS versions 18.11 through 21.6.beta are affected by a Directory Traversal vulnerability in /module/ai/control.php that allows arbitrary code execution via a crafted file upload. The root cause is a directory traversal flaw in the file-upload handling, enabling an attacker to place or execu...

9.8CVSS5.9AI score0.02293EPSS
Exploits0References2
NVD
NVD
added 2026/01/16 8:15 p.m.7 views

CVE-2026-23730

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and nomeClasse=ProdutoControle...

6.1CVSS0.00212EPSS
Exploits1References3
NVD
NVD
added 2026/01/16 8:15 p.m.3 views

CVE-2026-23727

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and nomeClasse=TipoSaidaControl...

6.1CVSS0.0018EPSS
Exploits1References3
NVD
NVD
added 2026/01/16 8:15 p.m.6 views

CVE-2026-23726

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, An Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and...

6.1CVSS0.00212EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/01/16 7:47 p.m.22 views

CVE-2026-23729 WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle)

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarDescricao and...

4.8CVSS0.00212EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/01/16 7:46 p.m.4 views

CVE-2026-23728 WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle)

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and nomeClasse=DestinoControle...

4.8CVSS6.4AI score0.00212EPSS
Exploits1References3
OSV
OSV
added 2026/01/16 7:41 p.m.3 views

CVE-2026-23727 WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle)

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and nomeClasse=TipoSaidaControl...

4.8CVSS6.8AI score0.0018EPSS
Exploits1References5
EUVD
EUVD
added 2026/01/16 7:41 p.m.4 views

EUVD-2026-3123

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and nomeClasse=TipoSaidaControl...

4.8CVSS6.3AI score0.0018EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/01/16 7:40 p.m.20 views

CVE-2026-23726 WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle)

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, An Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarTodos and...

4.8CVSS0.00212EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/01/16 12:0 a.m.3 views

PT-2026-3312

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.6.2 Description WeGIA is a web manager for charitable institutions. An Open Redirect issue exists in the /WeGIA/controle/control.php API endpoint, specifically through the nextPage parameter when used with...

4.8CVSS6.5AI score0.00212EPSS
Exploits1References8
CNNVD
CNNVD
added 2026/01/16 12:0 a.m.6 views

WeGIA input validation error vulnerability

WeGIA is a network manager for the welfare organization developed by Nilson Lazarin. Versions of WeGIA prior to 3.6.2 contained a vulnerability related to input validation errors. This vulnerability stemmed from the lack of validation or restrictions on the nextPage parameter in the...

6.1CVSS5.8AI score0.0018EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/10/14 9:50 p.m.10 views

CVE-2025-62361

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.0, an Open Redirect vulnerability was identified in the control.php endpoint of the WeGIA application, specifically in the nextPage parameter metodo=listarTodos...

6.1CVSS6.8AI score0.00203EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/10/13 9:27 p.m.10 views

CVE-2025-62361 WeGIA Open Redirect Vulnerability in `control.php` endpoint `nextPage` parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle)

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.0, an Open Redirect vulnerability was identified in the control.php endpoint of the WeGIA application, specifically in the nextPage parameter metodo=listarTodos...

4.8CVSS0.00203EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/13 9:27 p.m.5 views

EUVD-2025-34092

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.0, an Open Redirect vulnerability was identified in the control.php endpoint of the WeGIA application, specifically in the nextPage parameter metodo=listarTodos...

4.8CVSS6.3AI score0.00203EPSS
Exploits1References2
CVE
CVE
added 2025/10/13 9:27 p.m.14 views

CVE-2025-62361

WeGIA open redirect vulnerability (CVE-2025-62361) affects versions prior to 3.5.0, in the control.php endpoint via the nextPage parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle). This flaw can redirect users to arbitrary external domains, enabling phishing or credential theft as descr...

6.1CVSS6.4AI score0.00203EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2025/10/13 12:0 a.m.5 views

WeGIA 输入验证错误漏洞

WeGIA is a web manager for welfare organizations by Nilson Lazarin Individual Developer. An input validation error vulnerability exists in WeGIA versions prior to 3.5.0, which stems from the presence of an open redirect in the nextPage parameter in the control.php endpoint, which could result in...

6.1CVSS6.6AI score0.00203EPSS
Exploits1References3
Rows per page
Query Builder