EUVD-2025-27185

Malicious code in bioql PyPI...

CVE-2025-58453 WeGIA vulnerable to Blind Time-Based SQL Injection in endpoint 'exibe_anexo.php' parameter 'id_anexo'

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in WeGIA versions 3.4.10 and prior in the endpoint /WeGIA/html/memorando/exibeanexo.php, in the idanexo parameter. This vulnerability allow an authorized attacker to execute arbitrary SQL queries,...

CVE-2025-58453

CVE-2025-58453 affects WeGIA Web Manager (versions 3.4.10 and earlier). The SQL Injection occurs in the exibe_anexo.php endpoint via the id_anexo parameter, enabling an attacker to run arbitrary SQL and access sensitive data. A patch is available in version 3.4.11. Some sources indicate a proof-o...