Vulnerabilities

TI-2026-29065 CVE-2026-40283

WeGIA has stored XSS in profile_paciente.php

HIGH 66

WeGIA is a web manager for charitable institutions.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00204 Published 2026-04-17 Fixed in 3.6.10 CWE-79

TI-2026-27605 CVE-2026-35475

WeGIA - Open Redirect - backup redirection — Unvalidated $_GET['redirect']

MEDIUM 56

WeGIA is a Web manager for charitable institutions.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0019 Published 2026-04-06 Fixed in 3.6.9 CWE-601

TI-2026-27604 CVE-2026-35474

WeGIA - Open Redirect - atualizacao redirection - Unvalidated $_GET['redirect']

MEDIUM 56

WeGIA is a Web manager for charitable institutions.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0019 Published 2026-04-06 Fixed in 3.6.9 CWE-601

TI-2026-27603 CVE-2026-35473

WeGIA - Open Redirect - IentradaControle - listarId() - Unvalidated $_GET['nextPage']

MEDIUM 56

WeGIA is a Web manager for charitable institutions.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0019 Published 2026-04-06 Fixed in 3.6.9 CWE-601

TI-2026-27535 CVE-2026-35399

WeGIA has Stored XSS in backup file names

HIGH 70

WeGIA is a Web manager for charitable institutions.

CVSS 4.0HIGH 8.5 Network No auth User interaction EPSS 0.00293 Published 2026-04-06 Fixed in 3.6.9 CWE-79

TI-2026-27602 CVE-2026-35472

WeGIA - Open Redirect - EstoqueControle - listarTodos() - Unvalidated $_GET['nextPage']

MEDIUM 56

WeGIA is a Web manager for charitable institutions.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00232 Published 2026-04-06 Fixed in 3.6.9 CWE-601

TI-2026-27534 CVE-2026-35398

WeGIA - Open Redirect - OrigemControle - listarTodos() & listarId_Nome() - Unvalidated $_GET['nextPage']

MEDIUM 56

WeGIA is a Web manager for charitable institutions.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00232 Published 2026-04-06 Fixed in 3.6.9 CWE-601

TI-2026-27532 CVE-2026-35396

WeGIA - Open Redirect - IsaidaControle - listarId() - Unvalidated $_GET['nextPage']

MEDIUM 62

WeGIA is a Web manager for charitable institutions.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00232 Published 2026-04-06 Fixed in 3.6.9 CWE-601

TI-2026-27531 CVE-2026-35395

WeGIA has a SQL Injection in DespachoDAO.php via id_memorando parameter

HIGH 73

WeGIA is a Web manager for charitable institutions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00408 Published 2026-04-06 Fixed in 3.6.9 CWE-89

TI-2026-26331 CVE-2026-33991

WeGIA has SQL Injection in deletar_tag.php

HIGH 73

WeGIA is a web manager for charitable institutions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00399 Published 2026-03-27 Fixed in 3.6.7 CWE-89

TI-2026-25567 CVE-2026-33136

WeGIA has Reflected Cross-Site Scripting (XSS) in `listar_memorandos_ativos.php` via `sccd` parameter

HIGH 75

WeGIA is a web manager for charitable institutions.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00223 Published 2026-03-20 Fixed in 3.6.7 CWE-79

TI-2026-25566 CVE-2026-33135

WeGIA has Reflected Cross-Site Scripting (XSS) in `novo_memorandoo.php` via `sccs` parameter

HIGH 75

WeGIA is a web manager for charitable institutions.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00233 Published 2026-03-20 Fixed in 3.6.7 CWE-79

TI-2026-25565 CVE-2026-33134

WeGIA has Authenticated Time-Based Blind SQL Injection in `restaurar_produto.php` via `id_produto` parameter

HIGH 79

WeGIA is a web manager for charitable institutions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00316 Published 2026-03-20 Fixed in 3.6.6 CWE-89

TI-2026-25564 CVE-2026-33133

WeGIA has an arbitrary SQL execution vulnerability via crafted backup archive

LOW 39

WeGIA is a web manager for charitable institutions.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00417 Published 2026-03-20 Fixed in 3.6.7 CWE-89

TI-2026-24448 CVE-2026-31896

WeGIA has a Time-Based Blind SQL Injection in remover_produto_ocultar.php

HIGH 82

WeGIA is a web manager for charitable institutions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.004 Published 2026-03-11 Fixed in 3.6.6 CWE-89

TI-2026-24447 CVE-2026-31895

WeGIA has a SQL Injection via Direct Query Interpolation in restaurar_produto.php

HIGH 73

WeGIA is a web manager for charitable institutions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0044 Published 2026-03-11 Fixed in 3.6.6 CWE-89

TI-2026-24446 CVE-2026-31894

WeGIA affected by arbitrary file read via symlink in backup restore

LOW 31

WeGIA is a web manager for charitable institutions.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00481 Published 2026-03-11 Fixed in 3.6.6 CWE-59

TI-2026-22685 CVE-2026-28411

WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`

HIGH 82

WeGIA is a web manager for charitable institutions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02699 Published 2026-02-27 Fixed in 3.6.5 CWE-288

TI-2026-22683 CVE-2026-28409

WeGIA Vulnerable to Remote Code Execution (RCE) via OS Command Injection

HIGH 82

WeGIA is a web manager for charitable institutions.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0362 Published 2026-02-27 Fixed in 3.6.5 CWE-78

TI-2026-22682 CVE-2026-28408

WeGIA lacks authentication verification in adicionar_tipo_docs_atendido.php

HIGH 82

WeGIA is a web manager for charitable institutions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00567 Published 2026-02-27 Fixed in 3.6.5 CWE-287

TI-2026-19104 CVE-2026-23731

WeGIA Clickjacking Vulnerability

MEDIUM 53

WeGIA is a web manager for charitable institutions.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00303 Published 2026-01-16 Fixed in 3.6.2 CWE-1021

TI-2026-19103 CVE-2026-23730

Open redirect in LabRedesCefetRJ WeGIA

MEDIUM 55

WeGIA is a web manager for charitable institutions.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00237 Published 2026-01-16 Fixed in 3.6.2 CWE-601

TI-2026-19102 CVE-2026-23729

Open redirect in LabRedesCefetRJ WeGIA

MEDIUM 61

WeGIA is a web manager for charitable institutions.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00237 Published 2026-01-16 Fixed in 3.6.2 CWE-601

TI-2026-19101 CVE-2026-23728

Open redirect in LabRedesCefetRJ WeGIA

MEDIUM 61

WeGIA is a web manager for charitable institutions.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00237 Published 2026-01-16 Fixed in 3.6.2 CWE-601

TI-2026-19100 CVE-2026-23727

Open redirect in LabRedesCefetRJ WeGIA

MEDIUM 55

WeGIA is a web manager for charitable institutions.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00215 Published 2026-01-16 Fixed in 3.6.2 CWE-601

Vulnerabilities

Filters