LabRedesCefetRJ

Records205All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical72CVSS 9.0–10.0

CVSS high37CVSS 7.0–8.9

Exploited now

LabRedesCefetRJ records in CISA KEV

No LabRedesCefetRJ vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wegia 179 records HIGH

Records

179 records in Wegia · all components

TI-2026-24448 CVE-2026-31896

WeGIA has a Time-Based Blind SQL Injection in remover_produto_ocultar.php

HIGH 82

WeGIA is a web manager for charitable institutions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.004 Published 2026-03-11 Fixed in 3.6.6 CWE-89

TI-2026-22685 CVE-2026-28411

WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`

HIGH 82

WeGIA is a web manager for charitable institutions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02699 Published 2026-02-27 Fixed in 3.6.5 CWE-288

TI-2026-22683 CVE-2026-28409

WeGIA Vulnerable to Remote Code Execution (RCE) via OS Command Injection

HIGH 82

WeGIA is a web manager for charitable institutions.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0362 Published 2026-02-27 Fixed in 3.6.5 CWE-78

TI-2026-22682 CVE-2026-28408

WeGIA lacks authentication verification in adicionar_tipo_docs_atendido.php

HIGH 82

WeGIA is a web manager for charitable institutions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00567 Published 2026-02-27 Fixed in 3.6.5 CWE-287

TI-2025-38628 CVE-2025-62360

WeGIA SQL Injection via 'id_dependente' param at endpoint `/html/funcionario/dependente_documento.php`

HIGH 82

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Prior to 3.5.1, a SQL Injection vulnerability was identified in the /html/funcionario/dependente_documento.php endpoint, spec…

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.00893 Published 2025-10-13 Fixed in 3.5.1 CWE-89

TI-2025-38050 CVE-2025-61605

WeGIA: SQL Injection (Blind Time-Based) Vulnerability in /pet/profile_pet.php Endpoint

HIGH 82

WeGIA is an open source web manager with a focus on charitable institutions.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00435 Published 2025-10-02 Fixed in 3.5.0 CWE-89

TI-2025-35975 CVE-2025-58159

WeGIA Authenticated Arbitrary File Upload Leading To Remote Code Execution (RCE)

HIGH 82

WeGIA is a Web manager for charitable institutions.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.00755 Published 2025-08-29 Fixed in 3.4.11 CWE-434

TI-2025-34851 CVE-2025-55169

WeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'

HIGH 82

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01739 Published 2025-08-12 Fixed in 3.4.8 CWE-22

TI-2025-33907 CVE-2025-54062

WeGIA SQL Injection (Blind Time-Based) Vulnerability in id_dependente Parameter on profile_dependente.php Endpoint

HIGH 82

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.0055 Published 2025-07-17 Fixed in 3.4.6 CWE-89

TI-2025-33906 CVE-2025-54061

SQL injection in LabRedesCefetRJ WeGIA

HIGH 82

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.0055 Published 2025-07-17 Fixed in 3.4.6 CWE-89

TI-2025-33905 CVE-2025-54060

SQL injection in LabRedesCefetRJ WeGIA

HIGH 82

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.0055 Published 2025-07-17 Fixed in 3.4.6 CWE-89

TI-2025-33903 CVE-2025-54058

SQL injection in LabRedesCefetRJ WeGIA

HIGH 82

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.0055 Published 2025-07-17 Fixed in 3.4.6 CWE-89

TI-2025-33802 CVE-2025-53937

WeGIA has SQL Injection (Blind Time-Based) Vulnerability in `cargo` Parameter on `control.php` Endpoint

HIGH 82

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00555 Published 2025-07-16 Fixed in 3.4.5 CWE-89

TI-2025-33715 CVE-2025-53823

WeGIA vulnerable to SQL Injection (Blind Time-Based) in `processa_deletar_socio.php` parameter `id_socio`

HIGH 82

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00563 Published 2025-07-14 Fixed in 3.4.5 CWE-89

TI-2025-33473 CVE-2025-53529

WeGIA allows SQL Injection in html/funcionario/profile_funcionario.php (id_funcionario parameter)

HIGH 82

WeGIA is a web manager for charitable institutions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00557 Published 2025-07-07 Fixed in 3.4.3 CWE-89

TI-2025-33084 CVE-2025-53091

WeGIA has Unauthenticated Time-Based Blind SQL Injection in almox Parameter

HIGH 82

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00536 Published 2025-06-27 No fix listed CWE-89

TI-2025-32084 CVE-2025-50201

WeGIA OS Command Injection in debug_info.php parameter 'branch'

HIGH 82

WeGIA is a web manager for charitable institutions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04743 Published 2025-06-19 Fixed in 3.4.2 CWE-78

TI-2025-29461 CVE-2025-46828

Unauthenticated SQL Injection on get_socios.php endpoint

HIGH 82

WeGIA is a web manager for charitable institutions.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00579 Published 2025-05-07 Fixed in 3.3.1 CWE-89

TI-2025-21673 CVE-2025-30367

WeGIA SQL Injection Vulnerability in nextPage Parameter on control.php Endpoint

HIGH 82

WeGIA is a Web manager for charitable institutions.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00523 Published 2025-03-27 Fixed in 3.2.6 CWE-89

TI-2025-21670 CVE-2025-30364

WeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionario

HIGH 82

WeGIA is a Web manager for charitable institutions.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.0066 Published 2025-03-27 Fixed in 3.2.8 CWE-89

TI-2025-19997 CVE-2025-27140

WeGIA vulnerable to OS Command Injection at endpoint 'importar_dump.php' parameter 'import' (RCE)

HIGH 82

WeGIA is a Web manager for charitable institutions.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.02921 Published 2025-02-24 Fixed in 3.2.15 CWE-284

TI-2025-19554 CVE-2025-26617

SQL Injection endpoint 'historico_paciente.php' parameter 'id_fichamedica' in WeGIA

HIGH 82

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00587 Published 2025-02-18 Fixed in 3.2.14 CWE-284

TI-2025-19553 CVE-2025-26616

Path Traversal endpoint 'exportar_dump.php' parameter 'file' in WeGIA

HIGH 82

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00678 Published 2025-02-18 Fixed in 3.2.14 CWE-22

TI-2025-19552 CVE-2025-26615

Path Traversal endpoint 'examples.php' parameter 'src' in WeGIA

HIGH 82

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00765 Published 2025-02-18 Fixed in 3.2.14 CWE-22

TI-2025-19550 CVE-2025-26613

OS Command Injection endpoint 'gerenciar_backup.php' parameter 'file' (RCE) in WeGIA

HIGH 82

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.02516 Published 2025-02-18 Fixed in 3.2.14 CWE-284

Open these records in search →