5 matches found
CVE-2025-24902
WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, salvarcargo.php endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing access to or deletion of sensitive information. Thi...
CVE-2025-24902
WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, salvarcargo.php endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing access to or deletion of sensitive information. Thi...
CVE-2025-24902
creationtimestamp| type| source ---|---|--- 2025-02-03 21:49:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113942157431197650 2025-02-03 22:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhckyqtwzf2p 2025-02-03 23:40:51+00:00| seen|...
CVE-2025-24902
CVE-2025-24902 affects the WeGIA Web Manager for charitable institutions. A SQL Injection flaw exists in the salvar_cargo.php endpoint (likely involving the id_cargo parameter) that could allow an authorized attacker to execute arbitrary SQL, exposing or deleting sensitive data. The issue is addr...
CVE-2025-24902 SQL Injection endpoint 'salvar_cargo.php' parameter 'id_cargo' in WeGIA
WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, salvarcargo.php endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing access to or deletion of sensitive information. Thi...