CVE-2026-55684 WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastrocobrancasgeracao.php endpoint accepts form-encoded POST data through extract$REQUEST and interpolates codigo, descricao, dataemissao, datavencimento, datapagamento, valor,...

CVE-2026-55684

The WeGIA web manager for charitable institutions is vulnerable to SQL Injection in the web/html/socio/sistema/cadastro_cobrancas_geracao.php endpoint prior to version 3.8.6 . The application improperly handles form-encoded POST data via extract($_REQUEST), interpolating multiple parameters—inclu...

CVE-2026-55684 WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastrocobrancasgeracao.php endpoint accepts form-encoded POST data through extract$REQUEST and interpolates codigo, descricao, dataemissao, datavencimento, datapagamento, valor,...

CVE-2026-55681 WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameter

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, an authenticated user with access to the Material & Patrimônio module can submit idproduto to web/html/matPat/restaurarprodutodesocultar.php, where a second extract$REQUEST overwrites the value previously sanitized by intval. The...

CVE-2026-55681 WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameter

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, an authenticated user with access to the Material & Patrimônio module can submit idproduto to web/html/matPat/restaurarprodutodesocultar.php, where a second extract$REQUEST overwrites the value previously sanitized by intval. The...

CVE-2026-55681

The web manager WeGIA for charitable institutions is vulnerable to SQL Injection in versions prior to 3.8.6 . An authenticated user with access to the Material & Patrimônio module can exploit the id_produto parameter in web/html/matPat/restaurar_produto_desocultar.php. The root cause is a second ...

CVE-2026-55681 WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameter

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, an authenticated user with access to the Material & Patrimônio module can submit idproduto to web/html/matPat/restaurarprodutodesocultar.php, where a second extract$REQUEST overwrites the value previously sanitized by intval. The...

EUVD-2026-101622

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, an authenticated user with access to the Material & Patrimônio module can submit idproduto to web/html/matPat/restaurarprodutodesocultar.php, where a second extract$REQUEST overwrites the value previously sanitized by intval. The...

CVE-2026-55681

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, an authenticated user with access to the Material & Patrimônio module can submit idproduto to web/html/matPat/restaurarprodutodesocultar.php, where a second extract$REQUEST overwrites the value previously sanitized by intval. The...

CVE-2026-55680

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/socio/sistema/cadastrocobranca.php can place a quoted SQL expression in the codigo parameter, which extract$REQUEST passes into the WHERE codigo= clause of an UPDATE statement without...

CVE-2026-55680 WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/socio/sistema/cadastrocobranca.php can place a quoted SQL expression in the codigo parameter, which extract$REQUEST passes into the WHERE codigo= clause of an UPDATE statement without...

EUVD-2026-101620

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/socio/sistema/cadastrocobranca.php can place a quoted SQL expression in the codigo parameter, which extract$REQUEST passes into the WHERE codigo= clause of an UPDATE statement without...

CVE-2026-55680 WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/socio/sistema/cadastrocobranca.php can place a quoted SQL expression in the codigo parameter, which extract$REQUEST passes into the WHERE codigo= clause of an UPDATE statement without...

CVE-2026-55680

The WeGIA web manager for charitable institutions is vulnerable to an unauthenticated SQL injection in the web/html/socio/sistema/cadastro_cobranca.php component. The root cause is the lack of validation or parameter binding when processing the codigo parameter via extract($_REQUEST), allowing an...

mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()

A flaw was found in MariaDB server. An application processing non-validated user input, which then uses mysqlrealescapestring and sends data to the database via text protocol with the big5 character set, is vulnerable to SQL injection. This allows a remote attacker to execute malicious SQL...

Important: Red Hat Security Advisory: mariadb-connector-c security update

An update for mariadb-connector-c is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

CVE-2026-55683 WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastrocobranca.php endpoint accepts POST input through extract$REQUEST and directly incorporates valor, valorpago, idpessoa, idsocio, and idsociotipo into UPDATE, INSERT, and SELECT...

CVE-2026-55683 WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastrocobranca.php endpoint accepts POST input through extract$REQUEST and directly incorporates valor, valorpago, idpessoa, idsocio, and idsociotipo into UPDATE, INSERT, and SELECT...

EUVD-2026-101619

WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastrocobranca.php endpoint accepts POST input through extract$REQUEST and directly incorporates valor, valorpago, idpessoa, idsocio, and idsociotipo into UPDATE, INSERT, and SELECT...

CVE-2026-55683

The WeGIA web manager for charitable institutions contains an SQL Injection vulnerability in the web/html/socio/sistema/cadastro_cobranca.php endpoint. Prior to version 3.8.6 , the application fails to use prepared statements when processing POST input via extract($_REQUEST). Specifically, the pa...