CVE-2025-26617

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, "historicopaciente.php" endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthoriz...

WeGIA Access Control Vulnerability

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has an access control error vulnerability that originates from the historicopaciente.php page of the WeGIA application instance containing a SQL injection vulnerability...

CVE-2025-26617: Improper Neutralization of Special Elements used in an SQL Command

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, historicopaciente.php endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized...