CVE-2024-57033

WeGIA 3.2.0 is vulnerable to Cross Site Scripting XSS via the dadosaddInfo parameter of documentosfuncionario.php...

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A cross-site scripting vulnerability exists in WeGIA versions prior to 3.2.0, which stems from vulnerability to cross-site scripting XSS attacks on the id parameter in /geral/documentosfuncionario.php...

CVE-2024-57034

WeGIA 3.2.0 is vulnerable to SQL Injection in querygeracaoauto.php via the query parameter...

WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA versions prior to 3.2.0 that stems from vulnerability to SQL injection attacks via the query parameter in querygeracaoauto.php...

CVE-2024-57034

WeGIA 3.2.0 is vulnerable to SQL Injection in querygeracaoauto.php via the query parameter...

CVE-2024-57032

WeGIA versions prior to 3.2.0 are affected by an Incorrect Access Control in controle/control.php. The application does not validate the old password (senha_antiga), allowing a password change by supplying any value. This constitutes a high-severity issue with potential total impact on authentica...

CVE-2024-57030

Wegia 3.2.0 is vulnerable to Cross Site Scripting XSS in /geral/documentosfuncionario.php via the id parameter...

CVE-2024-57031

WeGIA 3.2.0 is vulnerable to SQL Injection in /funcionario/remuneracao.php via the idfuncionario parameter...

CVE-2024-57035

WeGIA v3.2.0 is vulnerable to SQL Injection via the nextPage parameter in /controle/control.php. The CVE records a high-severity issue (CVSS 3.1: 9.8) with network attack vector and no privileges/user interaction required. Remediation details are not provided in the supplied documents.

CVE-2024-57032

WeGIA 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application does not validate the value of the old password, so it is possible to change the password by placing any value in the senhaantiga field...

PT-2025-3393 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.0 Description: The issue concerns an incorrect access control in the controle/control.php file. Specifically, the application fails to validate the value of the old password, allowing password changes by entering a...

CVE-2024-57032

WeGIA 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application does not validate the value of the old password, so it is possible to change the password by placing any value in the senhaantiga field...

CVE-2024-57035

WeGIA v3.2.0 is vulnerable to SQL Injection viathe nextPage parameter in /controle/control.php...

PT-2025-3395 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.0 Description: The issue concerns SQL Injection in the query geracao auto.php file through the query parameter. This allows for potential exploitation. Recommendations: For versions prior to 3.2.0, update to versio...

CVE-2024-57034

WeGIA 3.2.0 is vulnerable to SQL Injection in querygeracaoauto.php via the query parameter...

CVE-2024-57034

CVE-2024-57034 affects WeGIA versions prior to 3.2.0, with a SQL injection vulnerability in the PHP file query_geracao_auto.php that is exploitable via the query parameter. Root cause is an unsafe handling of the query parameter in the underlying SQL. Impact is high (confidentiality, integrity, a...

CVE-2024-57035

WeGIA v3.2.0 is vulnerable to SQL Injection viathe nextPage parameter in /controle/control.php...

WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA versions prior to 3.2.0, which stems from vulnerability to SQL injection attacks on the idfuncionario parameter in /funcionario/remuneracao.php...

CVE-2024-57033

WeGIA 3.2.0 is vulnerable to Cross Site Scripting XSS via the dadosaddInfo parameter of documentosfuncionario.php...

WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA versions prior to 3.2.0 that stems from vulnerability to a false access control attack in control/control.php...