Skip to contentLabredescefetrj Wegia vulnerabilities
- labredescefetrj wegiaWeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `id`CVE-2025-539356.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Stored Cross-Site Scripting via endpoint 'control.php' parameter 'descricao_emergencia'CVE-2025-539346.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Stored Cross-Site Scripting via endpoint 'adicionar_enfermidade.php' parameter 'nome'CVE-2025-539336.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Reflected Cross-Site Scripting via endpoint 'cadastro_adotante.php' parameter 'cpf'CVE-2025-539326.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Stored Cross-Site Scripting via endpoint `adicionar_raca.php` parameter `raca`CVE-2025-539316.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Stored Cross-Site Scripting (XSS) via endpoint 'adicionar_especie.php' parameter 'especie'CVE-2025-539306.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Stored Cross-Site Scripting (XSS) via endpoint `adicionar_cor.php` parameter `cor`CVE-2025-539296.4 Medium
- labredescefetrj wegiaWeGIA ReflectedCross-Site Scripting (XSS) vulnerability in endpoint 'cadastro_pet.php' parameter 'msg'CVE-2025-538246.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to SQL Injection (Blind Time-Based) in `processa_deletar_socio.php` parameter `id_socio`CVE-2025-5382310.0 Critical
- labredescefetrj wegiaWeGIA vulnerable to Reflected Cross-Site Scripting in endpoint 'relatorio_geracao.php' parameter 'tipo_relatorio'CVE-2025-538226.5 Medium
- labredescefetrj wegiaWeGIA vulnerable to Open Redirect in endpoint 'control.php' parameter 'nextPage'CVE-2025-538214.7 Medium
- labredescefetrj wegiaWeGIA vulnerable to Cross-Site Scripting (XSS) Reflected via endpoint 'index.php' parameter 'erro'CVE-2025-538206.5 Medium
- labredescefetrj wegiaWeGIA allows Uncontrolled Resource Consumption via the fid parameterCVE-2025-535318.7 High
- labredescefetrj wegiaWeGIA allows Uncontrolled Resource Consumption via the errorstr parameterCVE-2025-535308.7 High
- labredescefetrj wegiaWeGIA allows SQL Injection in html/funcionario/profile_funcionario.php (id_funcionario parameter)CVE-2025-535299.8 Critical
- labredescefetrj wegiaWeGIA allows Time-Based Blind SQL Injection in the relatorio_geracao.php endpointCVE-2025-535278.3 High
- labredescefetrj wegiaWeGIA allows Stored XSS attacks in novo_memorando.phpCVE-2025-535262.0 Low
- labredescefetrj wegiaWebGia allows Cross-Site Scripting (XSS) in profile_familiar.php via the id_dependente parameterCVE-2025-535252.0 Low
- labredescefetrj wegiaWebGia allows Cross-Site Scripting (XSS) in cadastro_dependente_pessoa_nova.php via the id_funcionario parameterCVE-2025-533772.0 Low
- labredescefetrj wegiaWeGIA has Unauthenticated Time-Based Blind SQL Injection in almox ParameterCVE-2025-5309110.0 Critical
- labredescefetrj wegiaLabRedesCefetRJ WeGIA Cadastro de Funcionário cadastro_funcionario.php cross site scriptingCVE-2025-66995.1 Medium
- labredescefetrj wegiaLabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoSaida.php cross site scriptingCVE-2025-66985.1 Medium
- labredescefetrj wegiaLabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoEntrada.php cross site scriptingCVE-2025-66975.1 Medium
- labredescefetrj wegiaLabRedesCefetRJ WeGIA Cadastro de Atendio Cadastro_Atendido.php cross site scriptingCVE-2025-66965.1 Medium
- labredescefetrj wegiaLabRedesCefetRJ WeGIA Additional Categoria adicionar_categoria.php cross site scriptingCVE-2025-66955.1 Medium
- labredescefetrj wegiaLabRedesCefetRJ WeGIA Adicionar Unidade adicionar_unidade.php cross site scriptingCVE-2025-66945.1 Medium
- labredescefetrj wegiaWeGIA SQL Injection Vulnerability in id Parameter on control.php EndpointCVE-2025-524748.3 High
- labredescefetrj wegiaWeGIA OS Command Injection in debug_info.php parameter 'branch'CVE-2025-502019.8 Critical
- labredescefetrj wegiaUnauthenticated SQL Injection on get_socios.php endpointCVE-2025-4682810.0 Critical
- labredescefetrj wegiaWeGIA SQL Injection Vulnerability in nextPage Parameter on control.php EndpointCVE-2025-3036710.0 Critical
- labredescefetrj wegiaWeGIA vulnerable to Stored XSS in personalizacao.phpCVE-2025-303666.2 Medium
- labredescefetrj wegiaSQL Injection in query_geracao_auto.phpCVE-2025-303659.4 Critical
- labredescefetrj wegiaWeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionarioCVE-2025-3036410.0 Critical
- labredescefetrj wegiaWeGIA vulnerable to Stored XSS in documentos_funcionario.php parameter dados_addInfoCVE-2025-303636.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Stored XSS in documentos_funcionario.php parameter idCVE-2025-303626.4 Medium
- labredescefetrj wegiaWeGIA Vulnerable to Broken Authentication - Old Password ValidationCVE-2025-303619.3 Critical
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Stored in endpoint `adicionar_tipo_docs_atendido.php` parameter `tipo`CVE-2025-297826.4 Medium
- labredescefetrj wegiaWeGIA has a stored Cross-Site Scripting (XSS) in 'processa_edicao_socio.php' via the 'socio_nome' parameterCVE-2025-274996.4 Medium
- labredescefetrj wegiaDenial of Service (DoS) in WeGIA due to Recursive Crawling of Dynamic URLsCVE-2025-274199.2 Critical
- labredescefetrj wegiaWeGIA contains a Stored Cross-Site Scripting (XSS) in 'atendido_parentesco_adicionar.php' via the 'descricao' parameterCVE-2025-274206.4 Medium
- labredescefetrj wegiaWeGIA contains a Stored Cross-Site Scripting (XSS) in 'adicionar_tipo_atendido.php' via the 'tipo' parameterCVE-2025-274186.4 Medium
- labredescefetrj wegiaWeGIA Contains a Stored Cross-Site Scripting (XSS) in 'adicionar_status_atendido.php' via the 'status' parameterCVE-2025-274176.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to OS Command Injection at endpoint 'importar_dump.php' parameter 'import' (RCE)CVE-2025-2714010.0 Critical
- labredescefetrj wegiaWeGIA has SQL Injection endpoint at 'dao/pet/adicionar_tipo_exame.php' parameter 'tipo_exame'CVE-2025-271339.4 Critical
- labredescefetrj wegiaSQL Injection endpoint 'html/personalizacao_upload.php' parameter 'id_campo' in WeGIACVE-2025-270969.4 Critical
- labredescefetrj wegiaSQL Injection endpoint 'deletar_cargo.php' parameter 'id_cargo' in WeGIACVE-2025-266059.4 Critical
- labredescefetrj wegiaSQL Injection endpoint 'informacao_adicional.php' parameter 'id_descricao' in WeGIACVE-2025-2660610.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'documento_excluir.php' parameter 'id_funcionario' in WeGIACVE-2025-2660710.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'dependente_docdependente.php' parameter 'id_dependente', 'id_doc' in WeGIACVE-2025-2660810.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'familiar_docfamiliar.php' parameter 'id_dependente', 'id_doc' in WeGIACVE-2025-2660910.0 Critical
- Show moreLoading…