Approved changes feed: RSS · Atom

cpe:2.3:a:wegia:wegia:3.4.0:*:*:*:*:*:*:*

part: a version: 3.4.0 update: *

VendorWegia (3d4112dc-d676-5e4e-96cf-f1a26484f9ed)
ProductWegia (e72a1206-0b74-5fc0-8220-57aaa574f231)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wega-project/wega purl2cpe 2026-06-01 10:13:25.694433

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6699 vulnerable 2026-06-08 07:43:15.910432 LabRedesCefetRJ WeGIA Cadastro de Funcionário cadastro_funcionario.php cross site scripting
LOW (3.5)
A vulnerability classified as problematic has been found in LabRedesCefetRJ WeGIA 3.4.0. This affects an unknown part of the file /html/funcionario/cadastro_funcionario.php of the component Cadastro de Funcionário. The manipulation of the argument Nome/Sobrenome leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This is a different issue than CVE-2025-23030. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-06-26T15:31:12.243Z
Updated: 2025-06-26T15:52:41.052Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6698 vulnerable 2026-06-08 07:43:15.909904 LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoSaida.php cross site scripting
LOW (3.5)
A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /html/matPat/adicionar_tipoSaida.php of the component Adicionar tipo. The manipulation of the argument Insira o novo tipo leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-06-26T15:00:14.315Z
Updated: 2025-06-26T15:19:38.030Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6697 vulnerable 2026-06-08 07:43:15.909322 LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoEntrada.php cross site scripting
LOW (3.5)
A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /html/matPat/adicionar_tipoEntrada.php of the component Adicionar tipo. The manipulation of the argument Insira o novo tipo leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-06-26T15:00:12.058Z
Updated: 2025-06-26T15:20:10.420Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6696 vulnerable 2026-06-08 07:43:15.908787 LabRedesCefetRJ WeGIA Cadastro de Atendio Cadastro_Atendido.php cross site scripting
LOW (3.5)
A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been classified as problematic. Affected is an unknown function of the file /html/atendido/Cadastro_Atendido.php of the component Cadastro de Atendio. The manipulation of the argument Nome/Sobrenome leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This is a different issue than CVE-2025-22615. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-06-26T14:31:05.633Z
Updated: 2025-06-26T14:46:07.561Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6695 vulnerable 2026-06-08 07:43:15.908400 LabRedesCefetRJ WeGIA Additional Categoria adicionar_categoria.php cross site scripting
LOW (3.5)
A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0 and classified as problematic. This issue affects some unknown processing of the file /html/matPat/adicionar_categoria.php of the component Additional Categoria. The manipulation of the argument Insira a nova categoria leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-06-26T13:31:06.906Z
Updated: 2025-06-26T13:50:43.202Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6694 vulnerable 2026-06-08 07:43:15.907916 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.