5 matches found
WeGIA 跨站脚本漏洞
WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A cross-site scripting vulnerability exists in WeGIA versions prior to 3.5.0 that stems from insufficient cleaning and escaping of the idpet parameter, which could lead to a reflective cross-site scriptin...
EUVD-2008-3122
Malware in sbrugna...
CVE-2025-61605 WeGIA: SQL Injection (Blind Time-Based) Vulnerability in /pet/profile_pet.php Endpoint
WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an SQL Injection vulnerability which was identified in the /pet/profilepet.php endpoint, specifically in the idpet parameter. This vulnerability allows attackers to execute arbitrary SQL...
CVE-2009-0378: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in the beamospetition combeamospetition 1.0.12 component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the pet parameter in a sign action...
CVE-2008-3132: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the beamospetition combeamospetition component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pet parameter to index.php...