Lucene search
+L

3 matches found

CVE
CVE
•added 2025/07/14 10:31 p.m.•36 views

CVE-2025-53823

WeGIA, an open source web manager for charitable organizations, has a SQL Injection vulnerability in versions prior to 3.4.5. The flaw is in the endpoint /WeGIA/html/socio/sistema/processa_deletar_socio.php, in the id_socio parameter, allowing execution of arbitrary SQL commands. This can comprom...

10CVSS7.3AI score0.00472EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/07/14 10:31 p.m.•20 views

CVE-2025-53823 WeGIA vulnerable to SQL Injection (Blind Time-Based) in `processa_deletar_socio.php` parameter `id_socio`

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Versions prior to 3.4.5 have a SQL Injection vulnerability in the endpoint /WeGIA/html/socio/sistema/processadeletarsocio.php, in the idsocio parameter. This vulnerability allows the execution...

10CVSS0.00472EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/14 12:00 a.m.•1 views

CVE-2025-53823: Improper Neutralization of Special Elements used in an SQL Command

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Versions prior to 3.4.5 have a SQL Injection vulnerability in the endpoint /WeGIA/html/socio/sistema/processadeletarsocio.php, in the idsocio parameter. This vulnerability allows the execution...

10CVSS6.3AI score0.00472EPSS
SaveExploits1References1
Rows per page
Query Builder