Labredescefetrj vulnerabilities

Products

• Wegia 195

Newest

• labredescefetrj wegia WeGIA: Stored Cross-Site Scripting (XSS) in "historico_prontuarios.php" via "textoProntuario" Field CVE-2026-61719 8.9 HighOctober 29, 2026
• labredescefetrj wegia WeGIA: Stored DOM XSS in listar_despachos.php Allows Account Takeover CVE-2026-61673 6.3 MediumOctober 29, 2026
• labredescefetrj wegia WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle Classes CVE-2026-61671 8.1 HighOctober 29, 2026
• labredescefetrj wegia WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php CVE-2026-55684 9.8 CriticalOctober 14, 2026
• labredescefetrj wegia WeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.php CVE-2026-55682 8.1 HighOctober 14, 2026
• labredescefetrj wegia WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameter CVE-2026-55681 8.8 HighOctober 14, 2026
• labredescefetrj wegia WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection CVE-2026-55679 6.5 MediumOctober 14, 2026
• labredescefetrj wegia WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter CVE-2026-55680 9.8 CriticalOctober 14, 2026
• labredescefetrj wegia WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php CVE-2026-55683 9.8 CriticalOctober 14, 2026
• labredescefetrj wegia WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php CVE-2026-54767 9.1 CriticalSeptember 17, 2026
• labredescefetrj wegia WeGIA: Authorization Bypass via Empty Resource Array in InternoControle CVE-2026-54671 8.8 HighSeptember 17, 2026
• labredescefetrj wegia WeGIA: Unauthenticated Auth Bypass + Local File Inclusion CVE-2026-54670 9.1 CriticalSeptember 17, 2026
• labredescefetrj wegia WeGIA < 3.9.2 Insecure Direct Object Reference via profile_funcionario.php CVE-2026-76634 7.1 HighAugust 20, 2026
• labredescefetrj wegia WeGIA < 3.9.2 Authorization Bypass Password Change via alterarSenha CVE-2026-76633 8.6 HighAugust 20, 2026
• labredescefetrj wegia WeGIA: Middleware whitelist bypass → open redirect via InternoControle.nextPage CVE-2026-45335 5.4 MediumMay 27, 2026
• labredescefetrj wegia WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.php CVE-2026-45027 5.9 MediumMay 27, 2026
• labredescefetrj wegia WeGIA: Stored XSS in html/atendido/processo_aceitacao.php CVE-2026-45026 6.8 MediumMay 11, 2026
• labredescefetrj wegia WeGIA: Stored XSS in html/atendido/etapa_processo.php CVE-2026-45025 6.8 MediumMay 11, 2026
• labredescefetrj wegia WeGIA: Error Handling Upload DocDependente CVE-2026-42873 0.0 NoneMay 11, 2026
• labredescefetrj wegia WeGIA: Reflected XSS in listar_arquivos_etapa.php CVE-2026-42872 6.1 MediumMay 11, 2026
• labredescefetrj wegia WeGIA: Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao' CVE-2026-42870 6.4 MediumMay 11, 2026
• labredescefetrj wegia WeGIA: Error Handling familiar_docfamiliar CVE-2026-42871 6.9 MediumMay 11, 2026
• labredescefetrj wegia WeGIA has Cross-Site Scripting in Controle de Contribuição CVE-2026-40286 7.5 HighApril 17, 2026
• labredescefetrj wegia WeGIA has SQL Injection via Session Variable Override in DespachoControle.php CVE-2026-40285 8.8 HighApril 17, 2026
• labredescefetrj wegia WeGIA has stored XSS in listar_despachos.php CVE-2026-40284 6.8 MediumApril 17, 2026
• labredescefetrj wegia WeGIA has stored XSS in intercorrencia_visualizar.php CVE-2026-40282 6.4 MediumApril 17, 2026
• labredescefetrj wegia WeGIA has stored XSS in profile_paciente.php CVE-2026-40283 6.8 MediumApril 17, 2026
• labredescefetrj wegia WeGIA - Open Redirect - backup redirection — Unvalidated $_GET['redirect'] CVE-2026-35475 5.1 MediumApril 6, 2026
• labredescefetrj wegia WeGIA - Open Redirect - atualizacao redirection - Unvalidated $_GET['redirect'] CVE-2026-35474 5.1 MediumApril 6, 2026
• labredescefetrj wegia WeGIA - Open Redirect - IentradaControle - listarId() - Unvalidated $_GET['nextPage'] CVE-2026-35473 5.1 MediumApril 6, 2026
• labredescefetrj wegia WeGIA has Stored XSS in backup file names CVE-2026-35399 8.5 HighApril 6, 2026
• labredescefetrj wegia WeGIA - Open Redirect - EstoqueControle - listarTodos() - Unvalidated $_GET['nextPage'] CVE-2026-35472 5.1 MediumApril 6, 2026
• labredescefetrj wegia WeGIA - Open Redirect - OrigemControle - listarTodos() & listarId_Nome() - Unvalidated $_GET['nextPage'] CVE-2026-35398 5.1 MediumApril 6, 2026
• labredescefetrj wegia WeGIA - Open Redirect - IsaidaControle - listarId() - Unvalidated $_GET['nextPage'] CVE-2026-35396 5.1 MediumApril 6, 2026
• labredescefetrj wegia WeGIA has a SQL Injection in DespachoDAO.php via id_memorando parameter CVE-2026-35395 8.8 HighApril 6, 2026
• labredescefetrj wegia WeGIA has SQL Injection in deletar_tag.php CVE-2026-33991 8.8 HighMarch 27, 2026
• labredescefetrj wegia WeGIA has Reflected Cross-Site Scripting (XSS) in `listar_memorandos_ativos.php` via `sccd` parameter CVE-2026-33136 9.3 CriticalMarch 20, 2026
• labredescefetrj wegia WeGIA has Reflected Cross-Site Scripting (XSS) in `novo_memorandoo.php` via `sccs` parameter CVE-2026-33135 9.3 CriticalMarch 20, 2026
• labredescefetrj wegia WeGIA has Authenticated Time-Based Blind SQL Injection in `restaurar_produto.php` via `id_produto` parameter CVE-2026-33134 9.3 CriticalMarch 20, 2026
• labredescefetrj wegia WeGIA has an arbitrary SQL execution vulnerability via crafted backup archive CVE-2026-33133 8.6 HighMarch 20, 2026
• labredescefetrj wegia WeGIA has a Time-Based Blind SQL Injection in remover_produto_ocultar.php CVE-2026-31896 9.8 CriticalMarch 11, 2026
• labredescefetrj wegia WeGIA has a SQL Injection via Direct Query Interpolation in restaurar_produto.php CVE-2026-31895 8.8 HighMarch 11, 2026
• labredescefetrj wegia WeGIA affected by arbitrary file read via symlink in backup restore CVE-2026-31894 6.9 MediumMarch 11, 2026
• labredescefetrj wegia WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)` CVE-2026-28411 9.8 CriticalFebruary 27, 2026
• labredescefetrj wegia WeGIA Vulnerable to Remote Code Execution (RCE) via OS Command Injection CVE-2026-28409 10.0 CriticalFebruary 27, 2026
• labredescefetrj wegia WeGIA lacks authentication verification in adicionar_tipo_docs_atendido.php CVE-2026-28408 9.8 CriticalFebruary 27, 2026
• labredescefetrj wegia WeGIA Clickjacking Vulnerability CVE-2026-23731 4.3 MediumJanuary 16, 2026
• labredescefetrj wegia WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=ProdutoControle) CVE-2026-23730 4.8 MediumJanuary 16, 2026
• labredescefetrj wegia WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle) CVE-2026-23729 4.8 MediumJanuary 16, 2026
• labredescefetrj wegia WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle) CVE-2026-23728 4.8 MediumJanuary 16, 2026
• Show olderLoading…