CVE-2025-30367

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.2.6 in the nextPage parameter of the /WeGIA/controle/control.php endpoint. This vulnerability allows attacker to manipulate SQL queries and access sensitive database information...

CVE-2025-30367 WeGIA SQL Injection Vulnerability in nextPage Parameter on control.php Endpoint

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.2.6 in the nextPage parameter of the /WeGIA/controle/control.php endpoint. This vulnerability allows attacker to manipulate SQL queries and access sensitive database information...

CVE-2025-30367 WeGIA SQL Injection Vulnerability in nextPage Parameter on control.php Endpoint

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.2.6 in the nextPage parameter of the /WeGIA/controle/control.php endpoint. This vulnerability allows attacker to manipulate SQL queries and access sensitive database information...

CVE-2025-30365 SQL Injection in query_geracao_auto.php

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.2.8 in the endpoint /WeGIA/html/socio/sistema/controller/querygeracaoauto.php, specifically in the query parameter. This vulnerability allows the execution of arbitrary SQL...

PT-2025-13385 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.8 Description: A SQL Injection issue was identified in the "/WeGIA/html/socio/sistema/controller/query geracao auto.php" endpoint, specifically in the query parameter. This issue allows the execution of arbitrary S...

CVE-2025-27133 WeGIA has SQL Injection endpoint at 'dao/pet/adicionar_tipo_exame.php' parameter 'tipo_exame'

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was discovered in the WeGIA application prior to version 3.2.15 at the adicionartipoexame.php endpoint. This vulnerability allows an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive...

CVE-2025-27096

CVE-2025-27096 affects WeGIA Web Manager for Institutions. A SQL Injection vulnerability exists in the personalizacao_upload.php endpoint that can allow an authorized attacker to run arbitrary SQL queries and access sensitive data. The issue is mitigated by upgrading to WeGIA 3.2.14; no public wo...

CVE-2025-26605 SQL Injection endpoint 'deletar_cargo.php' parameter 'id_cargo' in WeGIA

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, deletarcargo.php endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing access...

CVE-2025-26606

WeGIA is affected by a SQL Injection in the informacao_adicional.php endpoint (parameter id_descricao) that can allow arbitrary SQL execution and access to sensitive data. The issue is resolved in version 3.2.13; users should upgrade to that version. The records consistently describe a high-sever...

CVE-2025-26607

CVE-2025-26607 affects WeGIA, an open source Web Manager for Institutions. A SQL Injection vulnerability exists in the documento_excluir.php endpoint (id_funcionario parameter), enabling arbitrary SQL queries and unauthorized data access. The issue has been fixed in version 3.2.13; upgrade to tha...

CVE-2025-26609 SQL Injection endpoint 'familiar_docfamiliar.php' parameter 'id_dependente', 'id_doc' in WeGIA

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, familiardocfamiliar.php endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthoriz...

CVE-2025-26610 SQL Injection endpoint 'restaurar_produto_desocultar.php' parameter 'id_produto' in WeGIA

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, restaurarprodutodesocultar.php endpoint. This vulnerability allow an authorized attacker to execute arbitrary SQL queries, allowin...

CVE-2025-24902

WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, salvarcargo.php endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing access to or deletion of sensitive information. Thi...

CVE-2025-24957 SQL Injection endpoint 'get_detalhes_socio.php' parameter 'id_socio' in WeGIA

WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA application, getdetalhessocio.php endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing access to or deletion of sensitive information...

CVE-2025-24957

WeGIA (Web Manager for Charitable Institutions) has a SQL Injection flaw in the get_detalhes_socio.php endpoint (parameter id_socio). The vulnerability could allow an authorized attacker to run arbitrary SQL and access or delete sensitive data. According to CVE records, the issue is addressed in ...

CVE-2025-23218

WeGIA is affected by a SQL Injection in the adicionar_especie.php endpoint. The vulnerability enables arbitrary SQL commands and a full database dump, leading to unauthorized access to sensitive data. Fixed in version 3.2.10; upgrade to 3.2.10 to patch the flaw. Public references note the issue a...

CVE-2025-23218 WeGIA has a SQL Injection endpoint 'adicionar_especie.php' parameter 'especie'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the WeGIA application, specifically in the adicionarespecie.php endpoint. This vulnerability allows attackers to execute arbitrary SQL commands ...

CVE-2024-57034

WeGIA 3.2.0 is vulnerable to SQL Injection in querygeracaoauto.php via the query parameter...

CVE-2024-57031

CVE-2024-57031 affects WeGIA prior to 3.2.0, where an SQL injection is possible in /funcionario/remuneracao.php via the id_funcionario parameter. The CVE entry documents a high-severity impact (CONF/I/A HIGH) with network attack vector and no privileges required, per NVD/CNA metrics. Connected so...

CVE-2024-57034

CVE-2024-57034 affects WeGIA versions prior to 3.2.0, with a SQL injection vulnerability in the PHP file query_geracao_auto.php that is exploitable via the query parameter. Root cause is an unsafe handling of the query parameter in the underlying SQL. Impact is high (confidentiality, integrity, a...