CVE-2025-24905

creationtimestamp| type| source ---|---|--- 2025-02-03 21:49:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113942157445800706 2025-02-03 23:40:51+00:00| seen| https://t.me/cvedetector/17128 2025-02-04 02:08:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhcxycd6ma2...

CVE-2025-24905 SQL Injection endpoint 'get_codigobarras_cobranca.php' parameter 'codigo' in WeGIA

WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, getcodigobarrascobranca.php endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing access to or deletion of sensitive...