CVE-2025-22133: Improper Control of Generation of Code

WeGIA is a web manager for charitable institutions. Prior to 3.2.8, a critical vulnerability was identified in the /WeGIA/html/socio/sistema/controller/controlaxlsx.php endpoint. The endpoint accepts file uploads without proper validation, allowing the upload of malicious files, such as .phar,...

WeGIA 代码问题漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A code issue vulnerability exists in WeGIA versions prior to 3.2.6, which stems from a cross-site scripting vulnerability in the file upload functionality that could allow an attacker to execute arbitrary...

WeGIA 代码问题漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A code issue vulnerability exists in WeGIA versions prior to 3.2.6, which stems from a lack of proper validation of the /WeGIA/html/socio/sistema/controller/controlaxlsx.php endpoint when accepting file...

PT-2025-4369 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.7 Description: A Cross-Site Scripting XSS vulnerability was identified in the file upload functionality of the "WeGIA/html/socio/sistema/controller/controla xlsx.php" endpoint. By uploading a file containing...

PT-2025-4370

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.8 Description: A critical issue was identified in the "/WeGIA/html/socio/sistema/controller/controla xlsx.php" endpoint, which accepts file uploads without proper validation. This allows the upload of malicious...

CVE-2024-53473

WeGIA 3.2.0 before 3998672 does not verify permission to change a password...

WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA versions prior to 3.2.0, which stems from a failure to verify permissions when changing passwords...

CVE-2024-53473

WeGIA 3.2.0 before 3998672 does not verify permission to change a password...

CVE-2024-53473

WeGIA 3.2.0 before 3998672 does not verify permission to change a password...

PT-2024-35753 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions 3.2.0 before 3998672 Description: The issue is related to a lack of permission verification when changing a password. This means that the software does not check if the user has the necessary permissions to change a password,...

CVE-2024-53473

The web manager WeGIA (developed by Nilson Lazarin) versions 3.2.0 before 3998672 is vulnerable to a security flaw where the software fails to verify permissions when changing a password. This lack of authorization allows for unauthorized password changes , potentially compromising account integr...

CVE-2024-53473: Missing Authorization

WeGIA 3.2.0 before 3998672 does not verify permission to change a password...

CVE-2024-53473

WeGIA 3.2.0 before 3998672 does not verify permission to change a password...

CVE-2024-53471

Multiple stored cross-site scripting XSS vulnerabilities in the component /configuracao/meiopagamento.php of WeGIA v3.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the id or name parameter...

CVE-2024-53472

WeGIA v3.2.0 was discovered to contain a Cross-Site Request Forgery CSRF...

CVE-2024-53470

Multiple stored cross-site scripting XSS vulnerabilities in the component /configuracao/gatewaypagamento.php of WeGIA v3.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the id or name parameter...

CVE-2024-53472: Cross-Site Request Forgery (CSRF)

WeGIA v3.2.0 was discovered to contain a Cross-Site Request Forgery CSRF...

CVE-2024-53470: Improper Neutralization of Input During Web Page Generation

Multiple stored cross-site scripting XSS vulnerabilities in the component /configuracao/gatewaypagamento.php of WeGIA v3.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the id or name parameter...

CVE-2024-53471

The web manager WeGIA v3.2.0 is vulnerable to multiple stored cross-site scripting (XSS) vulnerabilities in the /configuracao/meio_pagamento.php component. The root cause is the improper neutralization of input, which allows an attacker to execute arbitrary web scripts or HTML by injecting a craf...

CVE-2024-53471

Multiple stored cross-site scripting XSS vulnerabilities in the component /configuracao/meiopagamento.php of WeGIA v3.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the id or name parameter...