CVE-2025-24902

CVE-2025-24902 affects the WeGIA Web Manager for charitable institutions. A SQL Injection flaw exists in the salvar_cargo.php endpoint (likely involving the id_cargo parameter) that could allow an authorized attacker to execute arbitrary SQL, exposing or deleting sensitive data. The issue is addr...

CVE-2025-24902 SQL Injection endpoint 'salvar_cargo.php' parameter 'id_cargo' in WeGIA

WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, salvarcargo.php endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing access to or deletion of sensitive information. Thi...