CVE-2025-23220

creationtimestamp| type| source ---|---|--- 2025-01-20 15:55:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113861495354774247 2025-01-20 16:01:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2363 2025-01-20 16:54:27+00:00| seen|...

CVE-2025-23220 WeGIA has a SQL Injection endpoint 'adicionar_raca.php' parameter 'raca'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the WeGIA application, specifically in the adicionarraca.php endpoint. This vulnerability allows attackers to execute arbitrary SQL commands in...

CVE-2025-23220

The CVE pertains to WeGIA, an open-source web manager for welfare organizations. A SQL Injection exists in the adicionar_raca.php endpoint (parameter raca), allowing attackers to execute arbitrary SQL and potentially dump the database. This vulnerability has a critical impact (high confidentialit...