Skip to contentLabredescefetrj Wegia vulnerabilities
- labredescefetrj wegiaWeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle)CVE-2026-237274.8 Medium
- labredescefetrj wegiaWeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle)CVE-2026-237264.8 Medium
- labredescefetrj wegiaWeGIA Stored Cross-Site Scripting (XSS) – nome Parameter on Adopters Information PageCVE-2026-237255.3 Medium
- labredescefetrj wegiaWeGIA Stored Cross-Site Scripting (XSS) – atendido_idatendido Parameter on Occurrence Registration PageCVE-2026-237244.3 Medium
- labredescefetrj wegiaWeGIA has a Reflected Cross-Site Scripting (XSS) vulnerability allowing arbitrary code execution and UI redressing.CVE-2026-237229.1 Critical
- labredescefetrj wegiaWeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameterCVE-2026-23723Public exploit7.2 High
- labredescefetrj wegiaWeGIA is vulnerable to SQL Injection via editar_categoria endpoint parameterCVE-2025-675019.4 Critical
- labredescefetrj wegiaWeGia is Vulnerable to XSS through id_pessoa Parameter on Password Configuration PageCVE-2025-674964.3 Medium
- labredescefetrj wegiaWeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'action'CVE-2025-625986.9 Medium
- labredescefetrj wegiaWeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'sql'CVE-2025-625976.9 Medium
- labredescefetrj wegiaWeGIA Open Redirect Vulnerability in `control.php` endpoint `nextPage` parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle)CVE-2025-623614.8 Medium
- labredescefetrj wegiaWeGIA SQL Injection via 'id_dependente' param at endpoint `/html/funcionario/dependente_documento.php`CVE-2025-62360Public exploit9.4 Critical
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint id_petCVE-2025-623595.3 Medium
- labredescefetrj wegiaWeGIA Reflected XSS to Account TakeOver at /html/configuracao/configuracao_geral.php via log parameterCVE-2025-623585.4 Medium
- labredescefetrj wegiaWeGIA SQL Injection via 'cpf' param at endpoint `/html/funcionario/cadastro_funcionario_pessoa_existente.php`CVE-2025-621798.6 High
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint '/html/atendido/cadastro_atendido_parentesco_pessoa_nova.php' parameter 'idatendido'CVE-2025-621783.5 Low
- labredescefetrj wegiaWeGIA vulnerable to SQL Injection via 'id_funcionario' param at endpoint `/html/funcionario/dependente_listar.php`CVE-2025-621778.6 High
- labredescefetrj wegiaWeGIA: Broken Access Control in `get_relatorios_socios.php` EndpointCVE-2025-616658.7 High
- labredescefetrj wegiaWeGIA: Open Redirect Vulnerability in `control.php` endpointCVE-2025-616064.8 Medium
- labredescefetrj wegiaWeGIA: SQL Injection (Blind Time-Based) Vulnerability in /pet/profile_pet.php EndpointCVE-2025-616059.4 Critical
- labredescefetrj wegiaWeGIA: Cross-Site Request Forgery (CSRF) Vulnerability in `control.php` EndpointCVE-2025-616047.1 High
- labredescefetrj wegiaWeGIA: SQL Injection (Blind Time-Based) Vulnerability in API `descricao` ParameterCVE-2025-616039.4 Critical
- labredescefetrj wegiaWeGIA vulnerable to SQL Injection into method `excluir` of the `ProdutoControle` class in the parameter `id_produto`.CVE-2025-599398.8 High
- labredescefetrj wegiaWeGIA has a bypass for the fix for CVE-2025-22133 - Arbitrary File Upload leads to Remote Code Execution (RCE)CVE-2025-5874510.0 Critical
- labredescefetrj wegiaWeGIA vulnerable to Blind Time-Based SQL Injection in endpoint 'listar_despachos.php' parameter 'id_memorando'CVE-2025-584548.9 High
- labredescefetrj wegiaWeGIA vulnerable to Blind Time-Based SQL Injection in endpoint 'exibe_anexo.php' parameter 'id_anexo'CVE-2025-584538.9 High
- labredescefetrj wegiaWeGIA vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint 'listar_despachos.php' parameter 'id_memorando'CVE-2025-584522.1 Low
- labredescefetrj wegiaWeGIA Authenticated Arbitrary File Upload Leading To Remote Code Execution (RCE)CVE-2025-5815910.0 Critical
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'pre_cadastro_adotante.php' parameter 'msg_e'CVE-2025-577656.5 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'cargos.php' parameter 'msg_e'CVE-2025-577646.5 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Reflected in 'insere_despacho.php' parameter 'sccs'CVE-2025-577636.4 Medium
- labredescefetrj wegiaWeGIA Stored Cross-Site Scripting (XSS) vulnerability in the endpoint 'dependente_docdependente.php' with parameter 'nome'CVE-2025-577626.4 Medium
- labredescefetrj wegiaWeGIA SQL Injection vulnerability via 'id_funcionario' param at endpoint `/html/funcionario/dependente_remover.php`CVE-2025-577619.4 Critical
- labredescefetrj wegiaWeGIA Anonymous Attacker can Delete Arbitrary Image file at endpoint `/html/personalizacao_remover.php`CVE-2025-551717.5 High
- labredescefetrj wegiaWeGIA reflected XSS via `verificacao` and `redir_config` param at endpoint `/html/alterar_senha.php`CVE-2025-551706.5 Medium
- labredescefetrj wegiaWeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'CVE-2025-5516910.0 Critical
- labredescefetrj wegiaWeGIA SQL Injection via id_fichamedica at endpoint `GET /html/saude/aplicar_medicamento.php`CVE-2025-551689.4 Critical
- labredescefetrj wegiaWeGIA SQL Injection via id_fichamedica at endpoint `GET/html/funcionario/dependente_remover.php`CVE-2025-551679.4 Critical
- labredescefetrj wegiaWeGIA vulnerable to SQL Injection (Blind Time-Based) in endpoint 'Profile_Atendido.php' parameter 'idatendido'CVE-2025-540799.4 Critical
- labredescefetrj wegiaWeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao_imagem.php' parameter 'err'CVE-2025-540786.5 Medium
- labredescefetrj wegiaWeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao.php' parameter 'err'CVE-2025-540776.5 Medium
- labredescefetrj wegiaWeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'pre_cadastro_atendido.php' parameter 'msg_e'CVE-2025-540766.5 Medium
- labredescefetrj wegiaWeGIA SQL Injection (Blind Time-Based) Vulnerability in id_dependente Parameter on profile_dependente.php EndpointCVE-2025-540629.4 Critical
- labredescefetrj wegiaWeGIASQL Injection (Blind Time-Based) Vulnerability in idatendido_familiares Parameter on dependente_editarDoc.php EndpointCVE-2025-540619.4 Critical
- labredescefetrj wegiaWeGIA SQL Injection (Blind Time-Based) Vulnerability in idatendido_familiares Parameter on dependente_editarInfoPessoal.php EndpointCVE-2025-540609.4 Critical
- labredescefetrj wegiaWeGIA SQL Injection (Blind Time-Based) Vulnerability in idatendido_familiares Parameter on dependente_editarEndereco.php EndpointCVE-2025-540589.4 Critical
- labredescefetrj wegiaWeGIA vulnerable to SQL Injection in endpoint profile_paciente.php parameter id_fichamedicaCVE-2025-539469.4 Critical
- labredescefetrj wegiaWeGIA vulnerable to Authentication Bypass due to Missing Session Validation in multiple endpointsCVE-2025-539386.9 Medium
- labredescefetrj wegiaWeGIA has SQL Injection (Blind Time-Based) Vulnerability in `cargo` Parameter on `control.php` EndpointCVE-2025-539379.4 Critical
- labredescefetrj wegiaWeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `nome_car`CVE-2025-539366.4 Medium
- Show moreLoading…