Lucene search
+L

4 matches found

Circl
Circl
added 2025/02/18 9:16 p.m.8 views

CVE-2025-26612

creationtimestamp| type| source ---|---|--- 2025-02-18 21:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lii6noc5gs2k 2025-02-18 22:34:38+00:00| published-proof-of-concept| Telegram/4XaNwPTMFyO1Vz7bqzn38wD37G0y60931j9yFHwcc2fnqpY 2025-02-18 22:34:40+00:00|...

10CVSS4.8AI score0.00546EPSS
Exploits1References3
NVD
NVD
added 2025/02/18 9:15 p.m.9 views

CVE-2025-26612

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, adicionaralmoxarife.php endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthoriz...

10CVSS0.00546EPSS
Exploits1References1
CVE
CVE
added 2025/02/18 8:34 p.m.69 views

CVE-2025-26612

WeGIA is affected by a SQL Injection in the adicionar_almoxarife.php endpoint. The vulnerability allows arbitrary SQL queries, potentially exposing sensitive data. The issue is addressed in version 3.2.13; upgrading is advised. Some sources also suggest temporary workarounds like restricting acce...

10CVSS8.3AI score0.00546EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2025/02/18 8:34 p.m.6 views

CVE-2025-26612 SQL Injection endpoint 'adicionar_almoxarife.php' parameter 'id_almoxarifado', 'id_funcionario' in WeGIA

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, adicionaralmoxarife.php endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthoriz...

10CVSS8.1AI score0.00546EPSS
Exploits1References3
Rows per page
Query Builder