CVE-2025-26613

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. An OS Command Injection vulnerability was discovered in the WeGIA application, "gerenciarbackup.php" endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely. This issue...

CVE-2025-26613: Improper Neutralization of Special Elements used in an OS Command

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. An OS Command Injection vulnerability was discovered in the WeGIA application, gerenciarbackup.php endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely. This issue ha...

WeGIA 访问控制错误漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has an access control error vulnerability that originates from the gerenciarbackup.php page of the WeGIA application instance containing an operating system command injection vulnerability...