WeGIA vulnerabilities
92 known vulnerabilities in WeGIA from LabRedesCefetRJ. 92 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is a Web manager for charitable institutions. Prior to 3.4.10, there is a SQL Injection vulnerability in the /html/funcionario/dependente_remover.php endpoint, specifically in the id_funcionario parameter. This vulnerability allows attackers to execute a
- 7.5 High severity
WeGIA: Improper Authentication
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, the application does not check authentication at endpoint /html/personalizacao_remover.php allowing anonymous attacker (without log
- 7.4 High severity
WeGIA: Improper Neutralization of Input During Web Page Generation
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a reflected cross-site scripting (XSS) vulnerability was identified in the /html/alterar_senha.php endpoint of the WeGIA applicatio
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a SQL Injection vulnerability was identified in the /html/saude/aplicar_medicamento.php endpoint, specifically in the id_fichamedic
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a SQL Injection vulnerability was identified in the /html/funcionario/dependente_remover.php endpoint, specifically in the id_depen
- 8.8 High severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.4.6 in the endpoint `/html/atendido/Profile_Atendido.php`, in the `idatendido` paramete
- 8.8 High severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.4.6 in the `/html/funcionario/profile_dependente.php` endpoint, specifically in the `id
- 8.8 High severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.4.6 in the `idatendido_familiares` parameter of the `/html/funcionario/dependente_edita
- 8.8 High severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.4.6 in the `idatendido_familiares` parameter of the `/html/funcionario/dependente_edita
- 8.8 High severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.4.6 in the `idatendido_familiares` parameter of the `/html/funcionario/dependente_edita
- 8.8 High severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.4.5 in the `id_funcionario` parameter of the `/html/saude/profile_paciente.php` endpoin
- 7.5 High severity
WeGIA: Missing Authentication for Critical Functionality
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. An Authentication Bypass vulnerability was identified in the `/dao/verificar_recursos_cargo.php` endpoint of the WeGIA application prior to version 3.4.5.
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the `/controle/control.php` endpoint, specifically in the `cargo` parameter, of WeGIA prior to version 3.4.
- 8.8 High severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Versions prior to 3.4.5 have a SQL Injection vulnerability in the endpoint `/WeGIA/html/socio/sistema/processa_deletar_socio.php`, in the `id_socio` parame
- 7.5 High severity
WeGIA: Allocation of Resources Without Limits or Throttling
WeGIA is a web manager for charitable institutions. The Wegia server has a vulnerability that allows excessively long HTTP GET requests to a specific URL. This issue arises from the lack of validation for the length of the fid parameter. Tests confirmed that t
- 7.5 High severity
WeGIA: Allocation of Resources Without Limits or Throttling
WeGIA is a web manager for charitable institutions. The Wegia server has a vulnerability that allows excessively long HTTP GET requests to a specific URL. This issue arises from the lack of validation for the length of the errorstr parameter. Tests confirmed t
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is a web manager for charitable institutions. An SQL Injection vulnerability was identified in the /html/funcionario/profile_funcionario.php endpoint. The id_funcionario parameter is not properly sanitized or validated before being used in a SQL query, a
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is a web manager for charitable institutions. A Time-Based Blind SQL Injection vulnerability was discovered in the almox parameter of the /controle/relatorio_geracao.php endpoint. This issue allows attacker to inject arbitrary SQL queries, potentially le
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Time-Based Blind SQL Injection vulnerability was discovered in version 3.3.3 the almox parameter of the `/controle/getProdutosPorAlmox.php` endpoint. Thi
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is a web manager for charitable institutions. Prior to version 3.4.2, a SQL Injection vulnerability was identified in the id parameter of the /WeGIA/controle/control.php endpoint. This vulnerability allows attacker to manipulate SQL queries and access se
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an OS Command
WeGIA is a web manager for charitable institutions. Prior to version 3.4.2, an OS Command Injection vulnerability was identified in the /html/configuracao/debug_info.php endpoint. The branch parameter is not properly sanitized before being concatenated and exe
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is a web manager for charitable institutions. An unauthenticated SQL Injection vulnerability was identified in versions up to and including 3.3.0 in the endpoint `/html/socio/sistema/get_socios.php`, specifically in the query parameter. This issue allows
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.2.6 in the nextPage parameter of the /WeGIA/controle/control.php endpoint. This vulnerability allows attacker to manipulate SQL queries and
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.2.8 in the endpoint /WeGIA/html/socio/sistema/controller/query_geracao_auto.php, specifically in the query parameter. This vulnerability all
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.2.8 in the endpoint /WeGIA/html/funcionario/remuneracao.php, in the id_funcionario parameter. This vulnerability allows the execution of arb
- 9.8 Critical severity
WeGIA: Improper Authentication
WeGIA is a Web manager for charitable institutions. A security vulnerability was identified in versions prior to 3.2.6, where it is possible to change a user's password without verifying the old password. This issue exists in the control.php endpoint and allow
- 7.5 High severity
WeGIA: Allocation of Resources Without Limits or Throttling
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Denial of Service (DoS) vulnerability exists in WeGIA. This vulnerability allows any unauthenticated user to cause the server to become unresponsive by performing
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an OS Command
WeGIA is a Web manager for charitable institutions. An OS Command Injection vulnerability was discovered in versions prior to 3.2.15 of the WeGIA application, `importar_dump.php` endpoint. This vulnerability could allow an attacker to execute arbitrary code re
- 8.8 High severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was discovered in the WeGIA application prior to version 3.2.15 at the `adicionar_tipo_exame.php` endpoint. This vulnerability allows an authorized attacker to execute arbitrary
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is a Web Manager for Institutions with a focus on Portuguese language. A SQL Injection vulnerability was discovered in the WeGIA application, personalizacao_upload.php endpoint. This vulnerability allow an authorized attacker to execute arbitrary SQL que
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `historico_paciente.php` endpoint. This vulnerability could allow an attacker to execute arbi
- 7.5 High severity
WeGIA: Improper Limitation of a Pathname to a Restricted Directory
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Path Traversal vulnerability was discovered in the WeGIA application, `exportar_dump.php` endpoint. This vulnerability could allow an attacker to gain unauthorize
- 7.5 High severity
WeGIA: Improper Limitation of a Pathname to a Restricted Directory
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Path Traversal vulnerability was discovered in the WeGIA application, `examples.php` endpoint. This vulnerability could allow an attacker to gain unauthorized acc
- 8.8 High severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `deletar_documento.php` endpoint. This vulnerability allow an authorized attacker to execute
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an OS Command
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. An OS Command Injection vulnerability was discovered in the WeGIA application, `gerenciar_backup.php` endpoint. This vulnerability could allow an attacker to execut
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `adicionar_almoxarife.php` endpoint. This vulnerability could allow an attacker to execute ar
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `remover_produto.php` endpoint. This vulnerability could allow an attacker to execute arbitra
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `restaurar_produto_desocultar.php` endpoint. This vulnerability allow an authorized attacker
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `familiar_docfamiliar.php` endpoint. This vulnerability could allow an attacker to execute ar
- 9.8 Critical severity
WeGIA: Improper Neutralization of Special Elements used in an SQL Command
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `dependente_docdependente.php` endpoint. This vulnerability could allow an attacker to execut