CVE-2025-26614

CVE-2025-26614 concerns the WeGIA open source Web Manager. A SQL injection vulnerability was discovered in the deletar_documento.php endpoint (notably affecting parameter id_cargo), allowing an authorized attacker to execute arbitrary SQL queries and potentially access sensitive information. The ...

CVE-2025-26614 SQL Injection endpoint 'deletar_documento.php' parameter 'id_cargo' in WeGIA

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, deletardocumento.php endpoint. This vulnerability allow an authorized attacker to execute arbitrary SQL queries, allowing access t...