CVE-2025-22133

Summary of the CVE-2025-22133 family (WeGIA): WeGIA Web Manager prior to version 3.2.8 had a critical arbitrary-file-upload vulnerability at /html/socio/sistema/controller/controla_xlsx.php that allowed uploading files such as .phar, enabling server execution. The issue persisted in later advisor...

CVE-2025-22132

CVE-2025-22132 affects the WeGIA web manager for charitable institutions. The vulnerability is a Cross-Site Scripting (XSS) in the file upload functionality at the endpoint WeGIA/html/socio/sistema/controller/controla_xlsx.php . An attacker can upload a file containing malicious JavaScript, causi...

CVE-2025-22132 WeGIA has a Cross-Site Scripting (XSS) in File Upload Field

WeGIA is a web manager for charitable institutions. A Cross-Site Scripting XSS vulnerability was identified in the file upload functionality of the WeGIA/html/socio/sistema/controller/controlaxlsx.php endpoint. By uploading a file containing malicious JavaScript code, an attacker can execute...

CVE-2025-22132 WeGIA has a Cross-Site Scripting (XSS) in File Upload Field

WeGIA is a web manager for charitable institutions. A Cross-Site Scripting XSS vulnerability was identified in the file upload functionality of the WeGIA/html/socio/sistema/controller/controlaxlsx.php endpoint. By uploading a file containing malicious JavaScript code, an attacker can execute...

CVE-2025-22132 WeGIA has a Cross-Site Scripting (XSS) in File Upload Field

WeGIA is a web manager for charitable institutions. A Cross-Site Scripting XSS vulnerability was identified in the file upload functionality of the WeGIA/html/socio/sistema/controller/controlaxlsx.php endpoint. By uploading a file containing malicious JavaScript code, an attacker can execute...

WeGIA 代码问题漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A code issue vulnerability exists in WeGIA versions prior to 3.2.6, which stems from a lack of proper validation of the /WeGIA/html/socio/sistema/controller/controlaxlsx.php endpoint when accepting file...

WeGIA 代码问题漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A code issue vulnerability exists in WeGIA versions prior to 3.2.6, which stems from a cross-site scripting vulnerability in the file upload functionality that could allow an attacker to execute arbitrary...

PT-2025-4370

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.8 Description: A critical issue was identified in the "/WeGIA/html/socio/sistema/controller/controla xlsx.php" endpoint, which accepts file uploads without proper validation. This allows the upload of malicious...

PT-2025-4369 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.7 Description: A Cross-Site Scripting XSS vulnerability was identified in the file upload functionality of the "WeGIA/html/socio/sistema/controller/controla xlsx.php" endpoint. By uploading a file containing...

CVE-2024-53473

WeGIA 3.2.0 before 3998672 does not verify permission to change a password...

CVE-2024-53473

WeGIA 3.2.0 before 3998672 does not verify permission to change a password...

WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA versions prior to 3.2.0, which stems from a failure to verify permissions when changing passwords...

CVE-2024-53473

WeGIA 3.2.0 before 3998672 does not verify permission to change a password...

PT-2024-35753 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions 3.2.0 before 3998672 Description: The issue is related to a lack of permission verification when changing a password. This means that the software does not check if the user has the necessary permissions to change a password,...

CVE-2024-53473

CVE-2024-53473 concerns WeGIA. The affected software is WeGIA version 3.2.0 before 3998672, where the password-change operation does not verify user permissions. This can allow unauthorized password changes. Public references consolidate that the fix is in 3998672 and later. Practical impact is u...

CVE-2024-53473

WeGIA 3.2.0 before 3998672 does not verify permission to change a password...

CVE-2024-53471

Multiple stored cross-site scripting XSS vulnerabilities in the component /configuracao/meiopagamento.php of WeGIA v3.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the id or name parameter...

CVE-2024-53472

WeGIA v3.2.0 was discovered to contain a Cross-Site Request Forgery CSRF...

CVE-2024-53470

Multiple stored cross-site scripting XSS vulnerabilities in the component /configuracao/gatewaypagamento.php of WeGIA v3.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the id or name parameter...

CVE-2024-53470

Multiple stored cross-site scripting XSS vulnerabilities in the component /configuracao/gatewaypagamento.php of WeGIA v3.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the id or name parameter...