Approved changes feed: RSS · Atom
cpe:2.3:a:nilsonlazarin:wegia:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Nilsonlazarin (fbcc1017-4693-5235-abe8-13d2e7f77045) |
|---|---|
| Product | Wegia (87acf63e-5dd8-5af9-a67f-73efeceabbf9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-22141 |
vulnerable | 2026-06-08 07:10:52.259114 |
WeGIA SQL Injection (Blind Time-Based) endpoint 'verificar_recursos_cargo.php' parameter 'cargo'
WeGIA is a web manager for charitable institutions. A SQL Injection vulnerability was identified in the /dao/verificar_recursos_cargo.php endpoint, specifically in the cargo parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. This vulnerability is fixed in 3.2.8.
Published: 2025-01-08T18:27:08.543Z
Updated: 2025-01-08T19:27:47.059Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22140 |
vulnerable | 2026-06-08 07:10:52.258530 |
WeGIA SQL Injection (Blind Time-Based) endpoint 'dependente_listar_um.php' parameter 'id_dependente'
WeGIA is a web manager for charitable institutions. A SQL Injection vulnerability was identified in the /html/funcionario/dependente_listar_um.php endpoint, specifically in the id_dependente parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. This vulnerability is fixed in 3.2.8.
Published: 2025-01-08T18:25:57.950Z
Updated: 2025-01-08T19:32:00.409Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22139 |
vulnerable | 2026-06-08 07:10:52.258024 |
WeGIA Cross-Site Scripting (XSS) Reflected endpoint `configuracao_geral.php` parameter `msg`
WeGIA is a web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the configuracao_geral.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msg_c parameter. This vulnerability is fixed in 3.2.8.
Published: 2025-01-08T18:26:04.346Z
Updated: 2025-01-08T19:29:21.650Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22133 |
vulnerable | 2026-06-08 07:10:52.248727 |
WeGIA Allows Arbitrary File Upload with Remote Code Execution (RCE)
CRITICAL (10)
WeGIA is a web manager for charitable institutions. Prior to 3.2.8, a critical vulnerability was identified in the /WeGIA/html/socio/sistema/controller/controla_xlsx.php endpoint. The endpoint accepts file uploads without proper validation, allowing the upload of malicious files, such as .phar, which can then be executed by the server. This vulnerability is fixed in 3.2.8.
Published: 2025-01-07T22:07:13.958Z
Updated: 2025-01-08T14:52:28.078Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22132 |
vulnerable | 2026-06-08 07:10:52.247446 |
WeGIA has a Cross-Site Scripting (XSS) in File Upload Field
HIGH (8.3)
WeGIA is a web manager for charitable institutions. A Cross-Site Scripting (XSS) vulnerability was identified in the file upload functionality of the WeGIA/html/socio/sistema/controller/controla_xlsx.php endpoint. By uploading a file containing malicious JavaScript code, an attacker can execute arbitrary scripts in the context of a victim's browser. This can lead to information theft, session hijacking, and other forms of client-side exploitation. This vulnerability is fixed in 3.2.7.
Published: 2025-01-07T22:04:41.805Z
Updated: 2025-01-08T15:34:50.893Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.