LabRedesCefetRJ WeGIA vulnerabilities

CVEs per yearBy the year they were published

1. 2025134
2. 202656

Newest CVEs

• CVE-2026-61719

  WeGIA: Stored Cross-Site Scripting (XSS) in "historico_prontuarios.php" via "textoProntuario" Field

  LabRedesCefetRJ · WeGIA

  High8.9
• CVE-2026-61673

  WeGIA: Stored DOM XSS in listar_despachos.php Allows Account Takeover

  LabRedesCefetRJ · WeGIA

  Medium6.3
• CVE-2026-61671

  WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle Classes

  LabRedesCefetRJ · WeGIA

  High8.1
• CVE-2026-55684

  WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php

  LabRedesCefetRJ · WeGIA

  Critical9.8
• CVE-2026-55682

  WeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.php

  LabRedesCefetRJ · WeGIA

  High8.1
• CVE-2026-55681

  WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameter

  LabRedesCefetRJ · WeGIA

  High8.8
• CVE-2026-55679

  WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection

  LabRedesCefetRJ · WeGIA

  Medium6.5
• CVE-2026-55680

  WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter

  LabRedesCefetRJ · WeGIA

  Critical9.8
• CVE-2026-55683

  WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php

  LabRedesCefetRJ · WeGIA

  Critical9.8
• CVE-2026-54767

  WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php

  LabRedesCefetRJ · WeGIA

  Critical9.1