Lucene search
+L

1668 matches found

BDU FSTEC
BDU FSTEC
added 2025/08/04 12:00 a.m.14 views

The vulnerability of the WeGIA web manager, related to the failure to protect the SQL query structure, allows attackers to execute arbitrary SQL code.

The vulnerability of the WeGIA web manager is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

10CVSS6AI score0.00499EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/01 12:00 a.m.16 views

The vulnerability in the adicionar_raca.php script of the WeGIA web manager allows a hacker to perform cross-site scripting attacks.

The vulnerability of the adicionarraca.php script of the WeGIA web manager is related to the failure to protect the website structure when processing the raca parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

5.5CVSS5.2AI score0.00255EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/01 12:00 a.m.14 views

The vulnerability in the control.php script of the WeGIA web manager allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability in the control.php script of the WeGIA web manager is related to the failure to protect the structure of the web page when processing the descricaoemergencia parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

5.5CVSS5.2AI score0.00255EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/01 12:00 a.m.15 views

The vulnerability of the personalizacao_selecao.php web manager of WeGIA allows attackers to perform cross-site scripting attacks.

The vulnerability of the personalizacaoselecao.php web handler of the WeGIA browser is related to the failure to protect the website structure when processing the id parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

6.4CVSS5.2AI score0.00271EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/01 12:00 a.m.17 views

The vulnerability in the adicionar_enfermidade.php web manager of the WeGIA system allows a hacker to perform cross-site scripting attacks.

The vulnerability of the adicionarenfermidade.php web handler of the WeGIA system is related to the failure to protect the website structure when processing the nome parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

5.5CVSS5.2AI score0.00255EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/01 12:00 a.m.12 views

The vulnerability of the /dao/verificar_recursos_cargo.php script of the WeGIA web manager allows a hacker to gain unauthorized access to protected information.

The vulnerability of the WeGIA web manager’s “/dao/verificarrecursoscargo.php” script is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.8CVSS5.5AI score0.00626EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/01 12:00 a.m.16 views

The vulnerability in the adicionar_especie.php script of the WeGIA web manager allows a attacker to perform cross-site scripting (XSS) attacks.

The vulnerability of the adicionarespecie.php script of the WeGIA web manager is related to the lack of measures taken to protect the website structure when processing the especie parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotel...

5.5CVSS5.2AI score0.00255EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/01 12:00 a.m.16 views

The vulnerability of the control.php script of the WeGIA web manager allows a hacker to execute arbitrary code.

The vulnerability of the control.php script of the WeGIA web manager is related to the failure to protect the SQL query structure when processing the cargo parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6.1AI score0.00473EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/01 12:00 a.m.14 views

The vulnerability of the cadastro_adotante.php web manager of WeGIA allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the cadastroadotante.php script of the WeGIA web manager is related to the lack of measures taken to protect the structure of the web page when processing the cpf parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS...

6.4CVSS5.2AI score0.00271EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/28 12:00 a.m.12 views

The vulnerability of the index.php file of the WeGIA web manager allows attackers to perform cross-site scripting attacks.

The vulnerability of the index.php file of the WeGIA web manager is related to the failure to protect the structure of the web page when processing the erro parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

7.8CVSS5.2AI score0.0024EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2025/07/25 12:00 a.m.52 views

WeGIA Cross-Site Scripting Vulnerability (CNVD-2025-17267)

WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the personalizacaoselecao.php endpoint id parameter, no details of the vulnerability are provided at this...

6.4CVSS6.3AI score0.00271EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/25 12:00 a.m.15 views

WeGIA Cross-Site Scripting Vulnerability (CNVD-2025-17259)

WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the adicionarraca.php endpoint raca parameter, no details of the vulnerability are provided at this time...

6.4CVSS6.3AI score0.00255EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/25 12:00 a.m.49 views

WeGIA Cross-Site Scripting Vulnerability (CNVD-2025-17256)

WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the adicionarcor.php endpoint cor parameter, no details of the vulnerability are provided at this time...

6.5CVSS6.3AI score0.00255EPSS
SaveExploits2References1
CNVD
CNVD
added 2025/07/25 12:00 a.m.15 views

WeGIA Cross-Site Scripting Vulnerability (CNVD-2025-17266)

WeGIA is a web manager for welfare organizations. WeGIA suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the personalizacaoselecao.php endpoint nomecar parameter, for which no detailed vulnerability details are...

6.4CVSS6.3AI score0.00271EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/25 12:00 a.m.52 views

WeGIA SQL Injection Vulnerability

WeGIA is a web manager for welfare organizations. WeGIA suffers from an SQL injection vulnerability that originates from the unvalidated parameter idatendido in file /html/atendido/ProfileAtendido.php, which can be exploited by an attacker to execute illegal SQL commands to steal sensitive databa...

9.4CVSS8.3AI score0.0038EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/25 12:00 a.m.8 views

WeGIA SQL Injection Vulnerability (CNVD-2025-17269)

WeGIA is a web manager for welfare organizations. WeGIA suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the /html/saude/profilepaciente.php endpoint idfuncionario parameter. An attacker could exploit this vulnerability...

9.4CVSS8.2AI score0.0038EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/25 12:00 a.m.21 views

WeGIA SQL Injection Vulnerability (CNVD-2025-17263)

WeGIA is a web manager for welfare organizations. WeGIA suffers from an SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the /html/funcionario/dependenteeditarDoc.php endpoint idatendidofamiliares parameter. An attacker could exploit...

9.4CVSS8.2AI score0.00469EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/25 12:00 a.m.12 views

WeGIA SQL Injection Vulnerability (CNVD-2025-17264)

WeGIA is a web manager for welfare organizations from the individual developer Nilson Lazarin. WeGIA suffers from an SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the /html/funcionario/dependenteeditarEndereco.php endpoint...

9.4CVSS8.3AI score0.00469EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/25 12:00 a.m.39 views

WeGIA SQL Injection Vulnerability (CNVD-2025-17268)

WeGIA is a web manager for welfare organizations. WeGIA suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the /html/funcionario/profiledependente.php endpoint iddependente parameter. An attacker could exploit this...

9.4CVSS8.2AI score0.00469EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/25 12:00 a.m.15 views

WeGIA SQL Injection Vulnerability (CNVD-2025-17265)

WeGIA is a web manager for welfare organizations from the individual developer Nilson Lazarin. WeGIA suffers from an SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the /html/funcionario/dependenteeditarInfoPessoal.php endpoint...

9.4CVSS8.3AI score0.00469EPSS
SaveExploits1References1
Rows per page
Query Builder