CVE-2025-53823

WeGIA, an open source web manager for charitable organizations, has a SQL Injection vulnerability in versions prior to 3.4.5. The flaw is in the endpoint /WeGIA/html/socio/sistema/processa_deletar_socio.php, in the id_socio parameter, allowing execution of arbitrary SQL commands. This can comprom...

CVE-2025-53823 WeGIA vulnerable to SQL Injection (Blind Time-Based) in `processa_deletar_socio.php` parameter `id_socio`

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Versions prior to 3.4.5 have a SQL Injection vulnerability in the endpoint /WeGIA/html/socio/sistema/processadeletarsocio.php, in the idsocio parameter. This vulnerability allows the execution...