Skip to contentWegia vulnerabilities
Newest
- labredescefetrj wegiaWeGIA vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint 'listar_despachos.php' parameter 'id_memorando'CVE-2025-584522.1 Low
- labredescefetrj wegiaWeGIA Authenticated Arbitrary File Upload Leading To Remote Code Execution (RCE)CVE-2025-5815910.0 Critical
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'pre_cadastro_adotante.php' parameter 'msg_e'CVE-2025-577656.5 Medium
- labredescefetrj wegiaWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'cargos.php' parameter 'msg_e'CVE-2025-577646.5 Medium
- labredescefetrj wegiaCross-Site Scripting (XSS) Reflected in 'insere_despacho.php' parameter 'sccs'CVE-2025-577636.4 Medium
- labredescefetrj wegiaWeGIA Stored Cross-Site Scripting (XSS) vulnerability in the endpoint 'dependente_docdependente.php' with parameter 'nome'CVE-2025-577626.4 Medium
- labredescefetrj wegiaWeGIA SQL Injection vulnerability via 'id_funcionario' param at endpoint `/html/funcionario/dependente_remover.php`CVE-2025-577619.4 Critical
- labredescefetrj wegiaWeGIA Anonymous Attacker can Delete Arbitrary Image file at endpoint `/html/personalizacao_remover.php`CVE-2025-551717.5 High
- labredescefetrj wegiaWeGIA reflected XSS via `verificacao` and `redir_config` param at endpoint `/html/alterar_senha.php`CVE-2025-551706.5 Medium
- labredescefetrj wegiaWeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'CVE-2025-5516910.0 Critical
- labredescefetrj wegiaWeGIA SQL Injection via id_fichamedica at endpoint `GET /html/saude/aplicar_medicamento.php`CVE-2025-551689.4 Critical
- labredescefetrj wegiaWeGIA SQL Injection via id_fichamedica at endpoint `GET/html/funcionario/dependente_remover.php`CVE-2025-551679.4 Critical
- labredescefetrj wegiaWeGIA vulnerable to SQL Injection (Blind Time-Based) in endpoint 'Profile_Atendido.php' parameter 'idatendido'CVE-2025-540799.4 Critical
- labredescefetrj wegiaWeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao_imagem.php' parameter 'err'CVE-2025-540786.5 Medium
- labredescefetrj wegiaWeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao.php' parameter 'err'CVE-2025-540776.5 Medium
- labredescefetrj wegiaWeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'pre_cadastro_atendido.php' parameter 'msg_e'CVE-2025-540766.5 Medium
- labredescefetrj wegiaWeGIA SQL Injection (Blind Time-Based) Vulnerability in id_dependente Parameter on profile_dependente.php EndpointCVE-2025-540629.4 Critical
- labredescefetrj wegiaWeGIASQL Injection (Blind Time-Based) Vulnerability in idatendido_familiares Parameter on dependente_editarDoc.php EndpointCVE-2025-540619.4 Critical
- labredescefetrj wegiaWeGIA SQL Injection (Blind Time-Based) Vulnerability in idatendido_familiares Parameter on dependente_editarInfoPessoal.php EndpointCVE-2025-540609.4 Critical
- labredescefetrj wegiaWeGIA SQL Injection (Blind Time-Based) Vulnerability in idatendido_familiares Parameter on dependente_editarEndereco.php EndpointCVE-2025-540589.4 Critical
- labredescefetrj wegiaWeGIA vulnerable to SQL Injection in endpoint profile_paciente.php parameter id_fichamedicaCVE-2025-539469.4 Critical
- labredescefetrj wegiaWeGIA vulnerable to Authentication Bypass due to Missing Session Validation in multiple endpointsCVE-2025-539386.9 Medium
- labredescefetrj wegiaWeGIA has SQL Injection (Blind Time-Based) Vulnerability in `cargo` Parameter on `control.php` EndpointCVE-2025-539379.4 Critical
- labredescefetrj wegiaWeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `nome_car`CVE-2025-539366.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `id`CVE-2025-539356.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Stored Cross-Site Scripting via endpoint 'control.php' parameter 'descricao_emergencia'CVE-2025-539346.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Stored Cross-Site Scripting via endpoint 'adicionar_enfermidade.php' parameter 'nome'CVE-2025-539336.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Reflected Cross-Site Scripting via endpoint 'cadastro_adotante.php' parameter 'cpf'CVE-2025-539326.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Stored Cross-Site Scripting via endpoint `adicionar_raca.php` parameter `raca`CVE-2025-539316.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Stored Cross-Site Scripting (XSS) via endpoint 'adicionar_especie.php' parameter 'especie'CVE-2025-539306.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to Stored Cross-Site Scripting (XSS) via endpoint `adicionar_cor.php` parameter `cor`CVE-2025-539296.4 Medium
- labredescefetrj wegiaWeGIA ReflectedCross-Site Scripting (XSS) vulnerability in endpoint 'cadastro_pet.php' parameter 'msg'CVE-2025-538246.4 Medium
- labredescefetrj wegiaWeGIA vulnerable to SQL Injection (Blind Time-Based) in `processa_deletar_socio.php` parameter `id_socio`CVE-2025-5382310.0 Critical
- labredescefetrj wegiaWeGIA vulnerable to Reflected Cross-Site Scripting in endpoint 'relatorio_geracao.php' parameter 'tipo_relatorio'CVE-2025-538226.5 Medium
- labredescefetrj wegiaWeGIA vulnerable to Open Redirect in endpoint 'control.php' parameter 'nextPage'CVE-2025-538214.7 Medium
- labredescefetrj wegiaWeGIA vulnerable to Cross-Site Scripting (XSS) Reflected via endpoint 'index.php' parameter 'erro'CVE-2025-538206.5 Medium
- labredescefetrj wegiaWeGIA allows Uncontrolled Resource Consumption via the fid parameterCVE-2025-535318.7 High
- labredescefetrj wegiaWeGIA allows Uncontrolled Resource Consumption via the errorstr parameterCVE-2025-535308.7 High
- labredescefetrj wegiaWeGIA allows SQL Injection in html/funcionario/profile_funcionario.php (id_funcionario parameter)CVE-2025-535299.8 Critical
- labredescefetrj wegiaWeGIA allows Time-Based Blind SQL Injection in the relatorio_geracao.php endpointCVE-2025-535278.3 High
- labredescefetrj wegiaWeGIA allows Stored XSS attacks in novo_memorando.phpCVE-2025-535262.0 Low
- labredescefetrj wegiaWebGia allows Cross-Site Scripting (XSS) in profile_familiar.php via the id_dependente parameterCVE-2025-535252.0 Low
- labredescefetrj wegiaWebGia allows Cross-Site Scripting (XSS) in cadastro_dependente_pessoa_nova.php via the id_funcionario parameterCVE-2025-533772.0 Low
- labredescefetrj wegiaWeGIA has Unauthenticated Time-Based Blind SQL Injection in almox ParameterCVE-2025-5309110.0 Critical
- labredescefetrj wegiaLabRedesCefetRJ WeGIA Cadastro de Funcionário cadastro_funcionario.php cross site scriptingCVE-2025-66995.1 Medium
- labredescefetrj wegiaLabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoSaida.php cross site scriptingCVE-2025-66985.1 Medium
- labredescefetrj wegiaLabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoEntrada.php cross site scriptingCVE-2025-66975.1 Medium
- labredescefetrj wegiaLabRedesCefetRJ WeGIA Cadastro de Atendio Cadastro_Atendido.php cross site scriptingCVE-2025-66965.1 Medium
- labredescefetrj wegiaLabRedesCefetRJ WeGIA Additional Categoria adicionar_categoria.php cross site scriptingCVE-2025-66955.1 Medium
- labredescefetrj wegiaLabRedesCefetRJ WeGIA Adicionar Unidade adicionar_unidade.php cross site scriptingCVE-2025-66945.1 Medium
- Show moreLoading…