CVE-2024-57035

WeGIA v3.2.0 is vulnerable to SQL Injection via the nextPage parameter in /controle/control.php. The CVE records a high-severity issue (CVSS 3.1: 9.8) with network attack vector and no privileges/user interaction required. Remediation details are not provided in the supplied documents.

CVE-2024-53472

A Cross-Site Request Forgery (CSRF) vulnerability exists in WeGIA version v3.2.0 , a web manager for welfare organizations. This flaw allows an attacker to trick a user into performing unintended actions on the web application. Practical impact includes unauthorized actions performed on behalf of...

CVE-2024-53472

WeGIA v3.2.0 was discovered to contain a Cross-Site Request Forgery CSRF...