LabRedesCefetRJ WeGIA

• CVE-2026-23727 Medium 4.8 WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle) 0.2%
• CVE-2026-23726 Medium 4.8 WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle) 0.2%
• CVE-2026-23725 Medium 5.3 WeGIA Stored Cross-Site Scripting (XSS) – nome Parameter on Adopters Information Page 0.2%
• CVE-2026-23724 Medium 4.3 WeGIA Stored Cross-Site Scripting (XSS) – atendido_idatendido Parameter on Occurrence Registration Page 0.2%
• CVE-2026-23722 Critical 9.1 WeGIA has a Reflected Cross-Site Scripting (XSS) vulnerability allowing arbitrary code execution and UI redressing. 0.3%
• CVE-2026-23723 High 7.2 WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameter 0.4%
• CVE-2025-67501 Critical 9.4 WeGIA is vulnerable to SQL Injection via editar_categoria endpoint parameter 0.5%
• CVE-2025-67496 Medium 4.3 WeGia is Vulnerable to XSS through id_pessoa Parameter on Password Configuration Page 0.2%
• CVE-2025-62598 Medium 6.9 WeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'action' 0.2%
• CVE-2025-62597 Medium 6.9 WeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'sql' 0.3%
• CVE-2025-62361 Medium 4.8 WeGIA Open Redirect Vulnerability in `control.php` endpoint `nextPage` parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle) 0.2%
• CVE-2025-62360 Critical 9.4 WeGIA SQL Injection via 'id_dependente' param at endpoint `/html/funcionario/dependente_documento.php` 0.9%
• CVE-2025-62359 Medium 5.3 WeGIA Cross-Site Scripting (XSS) Reflected endpoint id_pet 0.2%
• CVE-2025-62358 Medium 5.4 WeGIA Reflected XSS to Account TakeOver at /html/configuracao/configuracao_geral.php via log parameter 0.3%
• CVE-2025-62179 High 8.6 WeGIA SQL Injection via 'cpf' param at endpoint `/html/funcionario/cadastro_funcionario_pessoa_existente.php` 0.4%
• CVE-2025-62178 Low 3.5 WeGIA Cross-Site Scripting (XSS) Reflected endpoint '/html/atendido/cadastro_atendido_parentesco_pessoa_nova.php' parameter 'idatendido' 0.2%
• CVE-2025-62177 High 8.6 WeGIA vulnerable to SQL Injection via 'id_funcionario' param at endpoint `/html/funcionario/dependente_listar.php` 0.5%
• CVE-2025-61665 High 8.7 WeGIA: Broken Access Control in `get_relatorios_socios.php` Endpoint 0.5%
• CVE-2025-61606 Medium 4.8 WeGIA: Open Redirect Vulnerability in `control.php` endpoint 0.2%
• CVE-2025-61605 Critical 9.4 WeGIA: SQL Injection (Blind Time-Based) Vulnerability in /pet/profile_pet.php Endpoint 0.4%
• CVE-2025-61604 High 7.1 WeGIA: Cross-Site Request Forgery (CSRF) Vulnerability in `control.php` Endpoint 0.2%
• CVE-2025-61603 Critical 9.4 WeGIA: SQL Injection (Blind Time-Based) Vulnerability in API `descricao` Parameter 0.4%
• CVE-2025-59939 High 8.8 WeGIA vulnerable to SQL Injection into method `excluir` of the `ProdutoControle` class in the parameter `id_produto`. 0.4%
• CVE-2025-58745 Critical 10.0 WeGIA has a bypass for the fix for CVE-2025-22133 - Arbitrary File Upload leads to Remote Code Execution (RCE) 0.8%
• CVE-2025-58454 High 8.9 WeGIA vulnerable to Blind Time-Based SQL Injection in endpoint 'listar_despachos.php' parameter 'id_memorando' 0.4%
• CVE-2025-58453 High 8.9 WeGIA vulnerable to Blind Time-Based SQL Injection in endpoint 'exibe_anexo.php' parameter 'id_anexo' 0.4%
• CVE-2025-58452 Low 2.1 WeGIA vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint 'listar_despachos.php' parameter 'id_memorando' 0.2%
• CVE-2025-58159 Critical 10.0 WeGIA Authenticated Arbitrary File Upload Leading To Remote Code Execution (RCE) 0.8%
• CVE-2025-57765 Medium 6.5 WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'pre_cadastro_adotante.php' parameter 'msg_e' 0.3%
• CVE-2025-57764 Medium 6.5 WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'cargos.php' parameter 'msg_e' 0.3%
• CVE-2025-57763 Medium 6.4 Cross-Site Scripting (XSS) Reflected in 'insere_despacho.php' parameter 'sccs' 0.2%
• CVE-2025-57762 Medium 6.4 WeGIA Stored Cross-Site Scripting (XSS) vulnerability in the endpoint 'dependente_docdependente.php' with parameter 'nome' 0.2%
• CVE-2025-57761 Critical 9.4 WeGIA SQL Injection vulnerability via 'id_funcionario' param at endpoint `/html/funcionario/dependente_remover.php` 0.4%
• CVE-2025-55171 High 7.5 WeGIA Anonymous Attacker can Delete Arbitrary Image file at endpoint `/html/personalizacao_remover.php` 0.7%
• CVE-2025-55170 Medium 6.5 WeGIA reflected XSS via `verificacao` and `redir_config` param at endpoint `/html/alterar_senha.php` 0.5%
• CVE-2025-55169 Critical 10.0 WeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file' 1.7%
• CVE-2025-55168 Critical 9.4 WeGIA SQL Injection via id_fichamedica at endpoint `GET /html/saude/aplicar_medicamento.php` 0.5%
• CVE-2025-55167 Critical 9.4 WeGIA SQL Injection via id_fichamedica at endpoint `GET/html/funcionario/dependente_remover.php` 0.6%
• CVE-2025-54079 Critical 9.4 WeGIA vulnerable to SQL Injection (Blind Time-Based) in endpoint 'Profile_Atendido.php' parameter 'idatendido' 0.4%
• CVE-2025-54078 Medium 6.5 WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao_imagem.php' parameter 'err' 0.3%
• CVE-2025-54077 Medium 6.5 WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao.php' parameter 'err' 0.3%
• CVE-2025-54076 Medium 6.5 WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'pre_cadastro_atendido.php' parameter 'msg_e' 0.3%
• CVE-2025-54062 Critical 9.4 WeGIA SQL Injection (Blind Time-Based) Vulnerability in id_dependente Parameter on profile_dependente.php Endpoint 0.5%
• CVE-2025-54061 Critical 9.4 WeGIASQL Injection (Blind Time-Based) Vulnerability in idatendido_familiares Parameter on dependente_editarDoc.php Endpoint 0.5%
• CVE-2025-54060 Critical 9.4 WeGIA SQL Injection (Blind Time-Based) Vulnerability in idatendido_familiares Parameter on dependente_editarInfoPessoal.php Endpoint 0.5%
• CVE-2025-54058 Critical 9.4 WeGIA SQL Injection (Blind Time-Based) Vulnerability in idatendido_familiares Parameter on dependente_editarEndereco.php Endpoint 0.5%
• CVE-2025-53946 Critical 9.4 WeGIA vulnerable to SQL Injection in endpoint profile_paciente.php parameter id_fichamedica 0.4%
• CVE-2025-53938 Medium 6.9 WeGIA vulnerable to Authentication Bypass due to Missing Session Validation in multiple endpoints 0.7%
• CVE-2025-53937 Critical 9.4 WeGIA has SQL Injection (Blind Time-Based) Vulnerability in `cargo` Parameter on `control.php` Endpoint 0.6%
• CVE-2025-53936 Medium 6.4 WeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `nome_car` 0.3%