The vulnerability of the nextPage component in the control.php file of the WeGIA web manager allows a hacker to redirect users to a malicious website.

The vulnerability of the nextPage component in the control.php file of the WeGIA web manager is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability could allow a malicious actor to redirect users to a malicious website...

CVE-2024-57035

WeGIA v3.2.0 is vulnerable to SQL Injection via the nextPage parameter in /controle/control.php. The CVE records a high-severity issue (CVSS 3.1: 9.8) with network attack vector and no privileges/user interaction required. Remediation details are not provided in the supplied documents.