Skip to contentLabredescefetrj Wegia vulnerabilities
- labredescefetrj wegiaSQL Injection endpoint 'restaurar_produto_desocultar.php' parameter 'id_produto' in WeGIACVE-2025-266109.4 Critical
- labredescefetrj wegiaSQL Injection endpoint 'remover_produto.php' parameter 'id_produto' in WeGIACVE-2025-2661110.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'adicionar_almoxarife.php' parameter 'id_almoxarifado', 'id_funcionario' in WeGIACVE-2025-2661210.0 Critical
- labredescefetrj wegiaOS Command Injection endpoint 'gerenciar_backup.php' parameter 'file' (RCE) in WeGIACVE-2025-2661310.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'deletar_documento.php' parameter 'id_cargo' in WeGIACVE-2025-266149.4 Critical
- labredescefetrj wegiaPath Traversal endpoint 'examples.php' parameter 'src' in WeGIACVE-2025-2661510.0 Critical
- labredescefetrj wegiaPath Traversal endpoint 'exportar_dump.php' parameter 'file' in WeGIACVE-2025-2661610.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'historico_paciente.php' parameter 'id_fichamedica' in WeGIACVE-2025-2661710.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'deletar_permissao.php' parameter 'c', 'a', 'r' in WeGIACVE-2025-249019.4 Critical
- labredescefetrj wegiaSQL Injection endpoint 'salvar_cargo.php' parameter 'id_cargo' in WeGIACVE-2025-249029.4 Critical
- labredescefetrj wegiaSQL Injection endpoint 'get_codigobarras_cobranca.php' parameter 'codigo' in WeGIACVE-2025-2490510.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'get_detalhes_cobranca.php' parameter 'codigo' in WeGIACVE-2025-2490610.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'get_detalhes_socio.php' parameter 'id_socio' in WeGIACVE-2025-2495710.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'salvar_tag.php' parameter 'id_tag' in WeGIACVE-2025-249589.4 Critical
- labredescefetrj wegiaWeGIA Open Redirect vulnerabilityCVE-2025-240204.8 Medium
- labredescefetrj wegiaWeGIA has a SQL Injection endpoint 'adicionar_raca.php' parameter 'raca'CVE-2025-2322010.0 Critical
- labredescefetrj wegiaWeGIA has a SQL Injection endpoint 'adicionar_cor.php' parameter 'cor'CVE-2025-2321910.0 Critical
- labredescefetrj wegiaWeGIA has a SQL Injection endpoint 'adicionar_especie.php' parameter 'especie'CVE-2025-2321810.0 Critical
- labredescefetrj wegiaCross-Site Scripting (XSS) Stored endpoint 'remuneracao.php ' parameter 'descricao' in WeGIACVE-2025-230386.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Reflected endpoint 'cadastro_funcionario.php' parameter 'cpf' in WeGIACVE-2025-230306.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Stored endpoint 'adicionar_alergia.php' parameter 'nome' in WeGIACVE-2025-230316.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Stored endpoint 'adicionar_escala.php' parameter 'escala' in WeGIACVE-2025-230326.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Stored endpoint 'adicionar_situacao.php' parameter 'situacao' in WeGIACVE-2025-230336.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Reflected endpoint 'tags.php' parameter 'msg_e' in WeGIACVE-2025-230346.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Stored endpoint 'adicionar_tipo_quadro_horario.php' parameter 'tipo' in WeGIACVE-2025-230356.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Reflected endpoint 'pre_cadastro_funcionario.php' parameter 'msg_e' in WeGIACVE-2025-230366.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Stored endpoint 'control.php' parameter 'cargo' in WeGIACVE-2025-230376.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao'CVE-2025-226136.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Stored endpoint 'dependente_editarInfoPessoal.php ' parameters 'nome' 'SobrenomeForm'CVE-2025-226146.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'Cadastro_Atendido.php' parameter 'cpf'CVE-2025-226156.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Stored endpoint 'dependente_parentesco_adicionar.php' parameter 'descricao'CVE-2025-226166.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_socio.php' parameter 'socio'CVE-2025-226176.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Stored endpoint 'adicionar_cargo.php' parameter 'cargo'CVE-2025-226186.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_permissoes.php' parameter 'msg_c'CVE-2025-226196.4 Medium
- labredescefetrj wegiaWeGIA has a Cross-Site Scripting (XSS) Reflected endpoint `configuracao_doacao.php` parameter `avulso`CVE-2025-226006.4 Medium
- labredescefetrj wegiaWeGIA has a Cross-Site Scripting (XSS) Reflected endpoint `home.php` parameter `msg_c`CVE-2025-225996.4 Medium
- labredescefetrj wegiaWeGIA has a Cross-Site Scripting (XSS) Stored endpoint 'cadastrarSocio.php' parameter 'nome'CVE-2025-225988.3 High
- labredescefetrj wegiaWeGIA has a Cross-Site Scripting (XSS) Stored endpoint 'CobrancaController.php' parameter 'local_recepcao'CVE-2025-225978.3 High
- labredescefetrj wegiaWeGIA has a Cross-Site Scripting (XSS) Reflected endpoint 'modulos_visiveis.php' parameter'msg_c'CVE-2025-225966.4 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'listar_permissoes.php' parameter 'msg_e'CVE-2025-221436.4 Medium
- labredescefetrj wegiaWeGIA SQL Injection (Blind Time-Based) endpoint 'verificar_recursos_cargo.php' parameter 'cargo'CVE-2025-221419.4 Critical
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint `configuracao_geral.php` parameter `msg`CVE-2025-221396.4 Medium
- labredescefetrj wegiaWeGIA SQL Injection (Blind Time-Based) endpoint 'dependente_listar_um.php' parameter 'id_dependente'CVE-2025-221409.4 Critical
- labredescefetrj wegiaWeGIA Allows Arbitrary File Upload with Remote Code Execution (RCE)CVE-2025-2213310.0 Critical
- labredescefetrj wegiaWeGIA has a Cross-Site Scripting (XSS) in File Upload FieldCVE-2025-221328.3 High