CVE-2025-26612

creationtimestamp| type| source ---|---|--- 2025-02-18 21:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lii6noc5gs2k 2025-02-18 22:34:38+00:00| published-proof-of-concept| Telegram/4XaNwPTMFyO1Vz7bqzn38wD37G0y60931j9yFHwcc2fnqpY 2025-02-18 22:34:40+00:00|...

CVE-2025-26612

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, adicionaralmoxarife.php endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthoriz...

CVE-2025-26612 SQL Injection endpoint 'adicionar_almoxarife.php' parameter 'id_almoxarifado', 'id_funcionario' in WeGIA

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, adicionaralmoxarife.php endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthoriz...

CVE-2025-26612

WeGIA is affected by a SQL Injection in the adicionar_almoxarife.php endpoint. The vulnerability allows arbitrary SQL queries, potentially exposing sensitive data. The issue is addressed in version 3.2.13; upgrading is advised. Some sources also suggest temporary workarounds like restricting acce...