Skip to contentWegia vulnerabilities
Newest
- labredescefetrj wegiaWeGIA SQL Injection Vulnerability in id Parameter on control.php EndpointCVE-2025-524748.3 High
- labredescefetrj wegiaWeGIA OS Command Injection in debug_info.php parameter 'branch'CVE-2025-502019.8 Critical
- labredescefetrj wegiaUnauthenticated SQL Injection on get_socios.php endpointCVE-2025-4682810.0 Critical
- labredescefetrj wegiaWeGIA SQL Injection Vulnerability in nextPage Parameter on control.php EndpointCVE-2025-3036710.0 Critical
- labredescefetrj wegiaWeGIA vulnerable to Stored XSS in personalizacao.phpCVE-2025-303666.2 Medium
- labredescefetrj wegiaSQL Injection in query_geracao_auto.phpCVE-2025-303659.4 Critical
- labredescefetrj wegiaWeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionarioCVE-2025-3036410.0 Critical
- labredescefetrj wegiaWeGIA vulnerable to Stored XSS in documentos_funcionario.php parameter dados_addInfoCVE-2025-303636.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Stored XSS in documentos_funcionario.php parameter idCVE-2025-303626.4 Medium
- labredescefetrj wegiaWeGIA Vulnerable to Broken Authentication - Old Password ValidationCVE-2025-303619.3 Critical
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Stored in endpoint `adicionar_tipo_docs_atendido.php` parameter `tipo`CVE-2025-297826.4 Medium
- labredescefetrj wegiaWeGIA has a stored Cross-Site Scripting (XSS) in 'processa_edicao_socio.php' via the 'socio_nome' parameterCVE-2025-274996.4 Medium
- labredescefetrj wegiaDenial of Service (DoS) in WeGIA due to Recursive Crawling of Dynamic URLsCVE-2025-274199.2 Critical
- labredescefetrj wegiaWeGIA contains a Stored Cross-Site Scripting (XSS) in 'atendido_parentesco_adicionar.php' via the 'descricao' parameterCVE-2025-274206.4 Medium
- labredescefetrj wegiaWeGIA contains a Stored Cross-Site Scripting (XSS) in 'adicionar_tipo_atendido.php' via the 'tipo' parameterCVE-2025-274186.4 Medium
- labredescefetrj wegiaWeGIA Contains a Stored Cross-Site Scripting (XSS) in 'adicionar_status_atendido.php' via the 'status' parameterCVE-2025-274176.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to OS Command Injection at endpoint 'importar_dump.php' parameter 'import' (RCE)CVE-2025-2714010.0 Critical
- labredescefetrj wegiaWeGIA has SQL Injection endpoint at 'dao/pet/adicionar_tipo_exame.php' parameter 'tipo_exame'CVE-2025-271339.4 Critical
- labredescefetrj wegiaSQL Injection endpoint 'html/personalizacao_upload.php' parameter 'id_campo' in WeGIACVE-2025-270969.4 Critical
- labredescefetrj wegiaSQL Injection endpoint 'deletar_cargo.php' parameter 'id_cargo' in WeGIACVE-2025-266059.4 Critical
- labredescefetrj wegiaSQL Injection endpoint 'informacao_adicional.php' parameter 'id_descricao' in WeGIACVE-2025-2660610.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'documento_excluir.php' parameter 'id_funcionario' in WeGIACVE-2025-2660710.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'dependente_docdependente.php' parameter 'id_dependente', 'id_doc' in WeGIACVE-2025-2660810.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'familiar_docfamiliar.php' parameter 'id_dependente', 'id_doc' in WeGIACVE-2025-2660910.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'restaurar_produto_desocultar.php' parameter 'id_produto' in WeGIACVE-2025-266109.4 Critical
- labredescefetrj wegiaSQL Injection endpoint 'remover_produto.php' parameter 'id_produto' in WeGIACVE-2025-2661110.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'adicionar_almoxarife.php' parameter 'id_almoxarifado', 'id_funcionario' in WeGIACVE-2025-2661210.0 Critical
- labredescefetrj wegiaOS Command Injection endpoint 'gerenciar_backup.php' parameter 'file' (RCE) in WeGIACVE-2025-2661310.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'deletar_documento.php' parameter 'id_cargo' in WeGIACVE-2025-266149.4 Critical
- labredescefetrj wegiaPath Traversal endpoint 'examples.php' parameter 'src' in WeGIACVE-2025-2661510.0 Critical
- labredescefetrj wegiaPath Traversal endpoint 'exportar_dump.php' parameter 'file' in WeGIACVE-2025-2661610.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'historico_paciente.php' parameter 'id_fichamedica' in WeGIACVE-2025-2661710.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'deletar_permissao.php' parameter 'c', 'a', 'r' in WeGIACVE-2025-249019.4 Critical
- labredescefetrj wegiaSQL Injection endpoint 'salvar_cargo.php' parameter 'id_cargo' in WeGIACVE-2025-249029.4 Critical
- labredescefetrj wegiaSQL Injection endpoint 'get_codigobarras_cobranca.php' parameter 'codigo' in WeGIACVE-2025-2490510.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'get_detalhes_cobranca.php' parameter 'codigo' in WeGIACVE-2025-2490610.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'get_detalhes_socio.php' parameter 'id_socio' in WeGIACVE-2025-2495710.0 Critical
- labredescefetrj wegiaSQL Injection endpoint 'salvar_tag.php' parameter 'id_tag' in WeGIACVE-2025-249589.4 Critical
- labredescefetrj wegiaWeGIA Open Redirect vulnerabilityCVE-2025-240204.8 Medium
- labredescefetrj wegiaWeGIA has a SQL Injection endpoint 'adicionar_raca.php' parameter 'raca'CVE-2025-2322010.0 Critical
- labredescefetrj wegiaWeGIA has a SQL Injection endpoint 'adicionar_cor.php' parameter 'cor'CVE-2025-2321910.0 Critical
- labredescefetrj wegiaWeGIA has a SQL Injection endpoint 'adicionar_especie.php' parameter 'especie'CVE-2025-2321810.0 Critical
- wegiaWeGIA v3.2.0 is vulnerable to SQL Injection viathe nextPage parameter in /controle/control.php.CVE-2024-570359.8 Critical
- wegiaWeGIA < 3.2.0 is vulnerable to SQL Injection in query_geracao_auto.php via the query parameter.CVE-2024-570349.8 Critical
- wegiaWeGIA < 3.2.0 is vulnerable to Cross Site Scripting (XSS) via the dados_addInfo parameter of...CVE-2024-570336.1 Medium
- wegiaWeGIA < 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application...CVE-2024-570329.8 Critical
- wegiaWeGIA < 3.2.0 is vulnerable to SQL Injection in /funcionario/remuneracao.php via the...CVE-2024-570319.8 Critical
- wegiaWegia < 3.2.0 is vulnerable to Cross Site Scripting (XSS) in /geral/documentos_funcionario.php...CVE-2024-570308.1 High
- labredescefetrj wegiaCross-Site Scripting (XSS) Stored endpoint 'remuneracao.php ' parameter 'descricao' in WeGIACVE-2025-230386.4 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Reflected endpoint 'cadastro_funcionario.php' parameter 'cpf' in WeGIACVE-2025-230306.4 Medium
- Show moreLoading…