Wegia vulnerabilities

Products

• Wegia 179

Newest

• labredescefetrj wegia WeGIA has stored XSS in profile_paciente.php CVE-2026-40283 6.8 MediumApril 17, 2026
• labredescefetrj wegia WeGIA - Open Redirect - backup redirection — Unvalidated $_GET['redirect'] CVE-2026-35475 5.1 MediumApril 6, 2026
• labredescefetrj wegia WeGIA - Open Redirect - atualizacao redirection - Unvalidated $_GET['redirect'] CVE-2026-35474 5.1 MediumApril 6, 2026
• labredescefetrj wegia WeGIA - Open Redirect - IentradaControle - listarId() - Unvalidated $_GET['nextPage'] CVE-2026-35473 5.1 MediumApril 6, 2026
• labredescefetrj wegia WeGIA has Stored XSS in backup file names CVE-2026-35399 8.5 HighApril 6, 2026
• labredescefetrj wegia WeGIA - Open Redirect - EstoqueControle - listarTodos() - Unvalidated $_GET['nextPage'] CVE-2026-35472 5.1 MediumApril 6, 2026
• labredescefetrj wegia WeGIA - Open Redirect - OrigemControle - listarTodos() & listarId_Nome() - Unvalidated $_GET['nextPage'] CVE-2026-35398 5.1 MediumApril 6, 2026
• labredescefetrj wegia WeGIA - Open Redirect - IsaidaControle - listarId() - Unvalidated $_GET['nextPage'] CVE-2026-35396 5.1 MediumApril 6, 2026
• labredescefetrj wegia WeGIA has a SQL Injection in DespachoDAO.php via id_memorando parameter CVE-2026-35395 8.8 HighApril 6, 2026
• labredescefetrj wegia WeGIA has SQL Injection in deletar_tag.php CVE-2026-33991 8.8 HighMarch 27, 2026
• labredescefetrj wegia WeGIA has Reflected Cross-Site Scripting (XSS) in `listar_memorandos_ativos.php` via `sccd` parameter CVE-2026-33136 9.3 CriticalMarch 20, 2026
• labredescefetrj wegia WeGIA has Reflected Cross-Site Scripting (XSS) in `novo_memorandoo.php` via `sccs` parameter CVE-2026-33135 9.3 CriticalMarch 20, 2026
• labredescefetrj wegia WeGIA has Authenticated Time-Based Blind SQL Injection in `restaurar_produto.php` via `id_produto` parameter CVE-2026-33134 9.3 CriticalMarch 20, 2026
• labredescefetrj wegia WeGIA has an arbitrary SQL execution vulnerability via crafted backup archive CVE-2026-33133 8.6 HighMarch 20, 2026
• labredescefetrj wegia WeGIA has a Time-Based Blind SQL Injection in remover_produto_ocultar.php CVE-2026-31896 9.8 CriticalMarch 11, 2026
• labredescefetrj wegia WeGIA has a SQL Injection via Direct Query Interpolation in restaurar_produto.php CVE-2026-31895 8.8 HighMarch 11, 2026
• labredescefetrj wegia WeGIA affected by arbitrary file read via symlink in backup restore CVE-2026-31894 6.9 MediumMarch 11, 2026
• labredescefetrj wegia WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)` CVE-2026-28411 9.8 CriticalFebruary 27, 2026
• labredescefetrj wegia WeGIA Vulnerable to Remote Code Execution (RCE) via OS Command Injection CVE-2026-28409 10.0 CriticalFebruary 27, 2026
• labredescefetrj wegia WeGIA lacks authentication verification in adicionar_tipo_docs_atendido.php CVE-2026-28408 9.8 CriticalFebruary 27, 2026
• labredescefetrj wegia WeGIA Clickjacking Vulnerability CVE-2026-23731 4.3 MediumJanuary 16, 2026
• labredescefetrj wegia WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=ProdutoControle) CVE-2026-23730 4.8 MediumJanuary 16, 2026
• labredescefetrj wegia WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle) CVE-2026-23729 4.8 MediumJanuary 16, 2026
• labredescefetrj wegia WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle) CVE-2026-23728 4.8 MediumJanuary 16, 2026
• labredescefetrj wegia WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle) CVE-2026-23727 4.8 MediumJanuary 16, 2026
• labredescefetrj wegia WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle) CVE-2026-23726 4.8 MediumJanuary 16, 2026
• labredescefetrj wegia WeGIA Stored Cross-Site Scripting (XSS) – nome Parameter on Adopters Information Page CVE-2026-23725 5.3 MediumJanuary 16, 2026
• labredescefetrj wegia WeGIA Stored Cross-Site Scripting (XSS) – atendido_idatendido Parameter on Occurrence Registration Page CVE-2026-23724 4.3 MediumJanuary 16, 2026
• labredescefetrj wegia WeGIA has a Reflected Cross-Site Scripting (XSS) vulnerability allowing arbitrary code execution and UI redressing. CVE-2026-23722 9.1 CriticalJanuary 16, 2026
• labredescefetrj wegia WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameter CVE-2026-23723 Public exploit 7.2 HighJanuary 16, 2026
• labredescefetrj wegia WeGIA is vulnerable to SQL Injection via editar_categoria endpoint parameter CVE-2025-67501 9.4 CriticalDecember 9, 2025
• labredescefetrj wegia WeGia is Vulnerable to XSS through id_pessoa Parameter on Password Configuration Page CVE-2025-67496 4.3 MediumDecember 9, 2025
• labredescefetrj wegia WeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'action' CVE-2025-62598 6.9 MediumOctober 21, 2025
• labredescefetrj wegia WeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'sql' CVE-2025-62597 6.9 MediumOctober 21, 2025
• labredescefetrj wegia WeGIA Open Redirect Vulnerability in `control.php` endpoint `nextPage` parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle) CVE-2025-62361 4.8 MediumOctober 13, 2025
• labredescefetrj wegia WeGIA SQL Injection via 'id_dependente' param at endpoint `/html/funcionario/dependente_documento.php` CVE-2025-62360 Public exploit 9.4 CriticalOctober 13, 2025
• labredescefetrj wegia WeGIA Cross-Site Scripting (XSS) Reflected endpoint id_pet CVE-2025-62359 5.3 MediumOctober 13, 2025
• labredescefetrj wegia WeGIA Reflected XSS to Account TakeOver at /html/configuracao/configuracao_geral.php via log parameter CVE-2025-62358 5.4 MediumOctober 13, 2025
• labredescefetrj wegia WeGIA SQL Injection via 'cpf' param at endpoint `/html/funcionario/cadastro_funcionario_pessoa_existente.php` CVE-2025-62179 8.6 HighOctober 13, 2025
• labredescefetrj wegia WeGIA Cross-Site Scripting (XSS) Reflected endpoint '/html/atendido/cadastro_atendido_parentesco_pessoa_nova.php' parameter 'idatendido' CVE-2025-62178 3.5 LowOctober 13, 2025
• labredescefetrj wegia WeGIA vulnerable to SQL Injection via 'id_funcionario' param at endpoint `/html/funcionario/dependente_listar.php` CVE-2025-62177 8.6 HighOctober 13, 2025
• labredescefetrj wegia WeGIA: Broken Access Control in `get_relatorios_socios.php` Endpoint CVE-2025-61665 8.7 HighOctober 2, 2025
• labredescefetrj wegia WeGIA: Open Redirect Vulnerability in `control.php` endpoint CVE-2025-61606 4.8 MediumOctober 2, 2025
• labredescefetrj wegia WeGIA: SQL Injection (Blind Time-Based) Vulnerability in /pet/profile_pet.php Endpoint CVE-2025-61605 9.4 CriticalOctober 2, 2025
• labredescefetrj wegia WeGIA: Cross-Site Request Forgery (CSRF) Vulnerability in `control.php` Endpoint CVE-2025-61604 7.1 HighOctober 2, 2025
• labredescefetrj wegia WeGIA: SQL Injection (Blind Time-Based) Vulnerability in API `descricao` Parameter CVE-2025-61603 9.4 CriticalOctober 2, 2025
• labredescefetrj wegia WeGIA vulnerable to SQL Injection into method `excluir` of the `ProdutoControle` class in the parameter `id_produto`. CVE-2025-59939 8.8 HighSeptember 27, 2025
• labredescefetrj wegia WeGIA has a bypass for the fix for CVE-2025-22133 - Arbitrary File Upload leads to Remote Code Execution (RCE) CVE-2025-58745 10.0 CriticalSeptember 8, 2025
• labredescefetrj wegia WeGIA vulnerable to Blind Time-Based SQL Injection in endpoint 'listar_despachos.php' parameter 'id_memorando' CVE-2025-58454 8.9 HighSeptember 8, 2025
• labredescefetrj wegia WeGIA vulnerable to Blind Time-Based SQL Injection in endpoint 'exibe_anexo.php' parameter 'id_anexo' CVE-2025-58453 8.9 HighSeptember 8, 2025
• Show olderLoading…