Skip to contentLabredescefetrj Wegia vulnerabilities
- labredescefetrj wegiaWeGIA: Stored Cross-Site Scripting (XSS) in "historico_prontuarios.php" via "textoProntuario" FieldCVE-2026-617198.9 High
- labredescefetrj wegiaWeGIA: Stored DOM XSS in listar_despachos.php Allows Account TakeoverCVE-2026-616736.3 Medium
- labredescefetrj wegiaWeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle ClassesCVE-2026-616718.1 High
- labredescefetrj wegiaWeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.phpCVE-2026-556849.8 Critical
- labredescefetrj wegiaWeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.phpCVE-2026-556828.1 High
- labredescefetrj wegiaWeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameterCVE-2026-556818.8 High
- labredescefetrj wegiaWeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code InjectionCVE-2026-556796.5 Medium
- labredescefetrj wegiaWeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameterCVE-2026-556809.8 Critical
- labredescefetrj wegiaWeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.phpCVE-2026-556839.8 Critical
- labredescefetrj wegiaWeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.phpCVE-2026-547679.1 Critical
- labredescefetrj wegiaWeGIA: Authorization Bypass via Empty Resource Array in InternoControleCVE-2026-546718.8 High
- labredescefetrj wegiaWeGIA: Unauthenticated Auth Bypass + Local File InclusionCVE-2026-546709.1 Critical
- labredescefetrj wegiaWeGIA < 3.9.2 Insecure Direct Object Reference via profile_funcionario.phpCVE-2026-766347.1 High
- labredescefetrj wegiaWeGIA < 3.9.2 Authorization Bypass Password Change via alterarSenhaCVE-2026-766338.6 High
- labredescefetrj wegiaWeGIA: Middleware whitelist bypass → open redirect via InternoControle.nextPageCVE-2026-453355.4 Medium
- labredescefetrj wegiaWeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.phpCVE-2026-450275.9 Medium
- labredescefetrj wegiaWeGIA: Stored XSS in html/atendido/processo_aceitacao.phpCVE-2026-450266.8 Medium
- labredescefetrj wegiaWeGIA: Stored XSS in html/atendido/etapa_processo.phpCVE-2026-450256.8 Medium
- labredescefetrj wegiaWeGIA: Error Handling Upload DocDependenteCVE-2026-428730.0 None
- labredescefetrj wegiaWeGIA: Reflected XSS in listar_arquivos_etapa.phpCVE-2026-428726.1 Medium
- labredescefetrj wegiaWeGIA: Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao'CVE-2026-428706.4 Medium
- labredescefetrj wegiaWeGIA: Error Handling familiar_docfamiliarCVE-2026-428716.9 Medium
- labredescefetrj wegiaWeGIA has Cross-Site Scripting in Controle de ContribuiçãoCVE-2026-402867.5 High
- labredescefetrj wegiaWeGIA has SQL Injection via Session Variable Override in DespachoControle.phpCVE-2026-402858.8 High
- labredescefetrj wegiaWeGIA has stored XSS in listar_despachos.phpCVE-2026-402846.8 Medium
- labredescefetrj wegiaWeGIA has stored XSS in intercorrencia_visualizar.phpCVE-2026-402826.4 Medium
- labredescefetrj wegiaWeGIA has stored XSS in profile_paciente.phpCVE-2026-402836.8 Medium
- labredescefetrj wegiaWeGIA - Open Redirect - backup redirection — Unvalidated $_GET['redirect']CVE-2026-354755.1 Medium
- labredescefetrj wegiaWeGIA - Open Redirect - atualizacao redirection - Unvalidated $_GET['redirect']CVE-2026-354745.1 Medium
- labredescefetrj wegiaWeGIA - Open Redirect - IentradaControle - listarId() - Unvalidated $_GET['nextPage']CVE-2026-354735.1 Medium
- labredescefetrj wegiaWeGIA has Stored XSS in backup file namesCVE-2026-353998.5 High
- labredescefetrj wegiaWeGIA - Open Redirect - EstoqueControle - listarTodos() - Unvalidated $_GET['nextPage']CVE-2026-354725.1 Medium
- labredescefetrj wegiaWeGIA - Open Redirect - OrigemControle - listarTodos() & listarId_Nome() - Unvalidated $_GET['nextPage']CVE-2026-353985.1 Medium
- labredescefetrj wegiaWeGIA - Open Redirect - IsaidaControle - listarId() - Unvalidated $_GET['nextPage']CVE-2026-353965.1 Medium
- labredescefetrj wegiaWeGIA has a SQL Injection in DespachoDAO.php via id_memorando parameterCVE-2026-353958.8 High
- labredescefetrj wegiaWeGIA has SQL Injection in deletar_tag.phpCVE-2026-339918.8 High
- labredescefetrj wegiaWeGIA has Reflected Cross-Site Scripting (XSS) in `listar_memorandos_ativos.php` via `sccd` parameterCVE-2026-331369.3 Critical
- labredescefetrj wegiaWeGIA has Reflected Cross-Site Scripting (XSS) in `novo_memorandoo.php` via `sccs` parameterCVE-2026-331359.3 Critical
- labredescefetrj wegiaWeGIA has Authenticated Time-Based Blind SQL Injection in `restaurar_produto.php` via `id_produto` parameterCVE-2026-331349.3 Critical
- labredescefetrj wegiaWeGIA has an arbitrary SQL execution vulnerability via crafted backup archiveCVE-2026-331338.6 High
- labredescefetrj wegiaWeGIA has a Time-Based Blind SQL Injection in remover_produto_ocultar.phpCVE-2026-318969.8 Critical
- labredescefetrj wegiaWeGIA has a SQL Injection via Direct Query Interpolation in restaurar_produto.phpCVE-2026-318958.8 High
- labredescefetrj wegiaWeGIA affected by arbitrary file read via symlink in backup restoreCVE-2026-318946.9 Medium
- labredescefetrj wegiaWeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`CVE-2026-284119.8 Critical
- labredescefetrj wegiaWeGIA Vulnerable to Remote Code Execution (RCE) via OS Command InjectionCVE-2026-2840910.0 Critical
- labredescefetrj wegiaWeGIA lacks authentication verification in adicionar_tipo_docs_atendido.phpCVE-2026-284089.8 Critical
- labredescefetrj wegiaWeGIA Clickjacking VulnerabilityCVE-2026-237314.3 Medium
- labredescefetrj wegiaWeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=ProdutoControle)CVE-2026-237304.8 Medium
- labredescefetrj wegiaWeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle)CVE-2026-237294.8 Medium
- labredescefetrj wegiaWeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle)CVE-2026-237284.8 Medium
- Show olderLoading…