CVE-2025-26617

CVE-2025-26617 affects the WeGIA open source Web Manager. A SQL Injection in the historico_paciente.php endpoint (parameter id_fichamedica) can lead to arbitrary SQL execution and unauthorized access to sensitive data. The issue is addressed in version 3.2.14; upgrade is advised. There are no pub...

CVE-2025-26617 SQL Injection endpoint 'historico_paciente.php' parameter 'id_fichamedica' in WeGIA

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, historicopaciente.php endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized...

WeGIA 访问控制错误漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has an access control error vulnerability that originates from the familiardocfamiliar.php page of the WeGIA application instance containing a SQL injection vulnerability...

PT-2025-7212 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.14 Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. An OS Command Injection vulnerability was discovered in the WeGIA application, gerenciar backup.php...

WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has a security vulnerability that originates from the deletarcargo.php page of the WeGIA application instance containing a SQL injection vulnerability...

WeGIA 访问控制错误漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has an access control error vulnerability that stems from the examples.php page of the WeGIA application instance containing a path traversal vulnerability...

PT-2025-7208 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.14 Description: A SQL Injection vulnerability was discovered in the WeGIA application, familiar docfamiliar.php endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing...

WeGIA 访问控制错误漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has an access control error vulnerability that stems from the exportardump.php page of the WeGIA application instance containing a path traversal vulnerability...

WeGIA 访问控制错误漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has an access control error vulnerability that originates from the informacaoadicional.php page of the WeGIA application instance containing a SQL injection vulnerability...

WeGIA 访问控制错误漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has an access control error vulnerability that originates from the documentoexcluir.php page of the WeGIA application instance containing a SQL injection vulnerability...

WeGIA SQL注入漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA suffers from an SQL injection vulnerability that originates from the adicionaralmoxarife.php page of the WeGIA application instance containing an SQL injection vulnerability...

WeGIA SQL注入漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has an SQL injection vulnerability that originates from the deletardocumento.php page of the WeGIA application instance containing an SQL injection vulnerability...

WeGIA 访问控制错误漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has an access control error vulnerability that originates from the historicopaciente.php page of the WeGIA application instance containing a SQL injection vulnerability...

WeGIA 访问控制错误漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has an access control error vulnerability that originates from the gerenciarbackup.php page of the WeGIA application instance containing an operating system command injection vulnerability...

WeGIA 访问控制错误漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has an access control error vulnerability that originates from the removerproduto.php page of the WeGIA application instance containing a SQL injection vulnerability...

PT-2025-7205 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.13 Description: A SQL Injection vulnerability was discovered in the WeGIA application, affecting the informacao adicional.php endpoint. This issue could allow an attacker to execute arbitrary SQL queries, resulting...

WeGIA SQL注入漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. WeGIA has an SQL injection vulnerability that originates from the restaurarprodutodesocultar.php page of the WeGIA application instance that contains an SQL injection vulnerability...

PT-2025-7211 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.13 Description: A SQL Injection vulnerability was discovered in the WeGIA application, adicionar almoxarife.php endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing...

CVE-2025-24905

WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, getcodigobarrascobranca.php endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing access to or deletion of sensitive...

CVE-2025-24958

WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, salvartag.php endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing access to or deletion of sensitive information. This...