LabRedesCefetRJ WeGIA

• CVE-2025-53935 Medium 6.4 WeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `id` 0.3%
• CVE-2025-53934 Medium 6.4 WeGIA vulnerable to Stored Cross-Site Scripting via endpoint 'control.php' parameter 'descricao_emergencia' 0.3%
• CVE-2025-53933 Medium 6.4 WeGIA vulnerable to Stored Cross-Site Scripting via endpoint 'adicionar_enfermidade.php' parameter 'nome' 0.3%
• CVE-2025-53932 Medium 6.4 WeGIA vulnerable to Reflected Cross-Site Scripting via endpoint 'cadastro_adotante.php' parameter 'cpf' 0.3%
• CVE-2025-53931 Medium 6.4 WeGIA vulnerable to Stored Cross-Site Scripting via endpoint `adicionar_raca.php` parameter `raca` 0.3%
• CVE-2025-53930 Medium 6.4 WeGIA vulnerable to Stored Cross-Site Scripting (XSS) via endpoint 'adicionar_especie.php' parameter 'especie' 0.3%
• CVE-2025-53929 Medium 6.4 WeGIA vulnerable to Stored Cross-Site Scripting (XSS) via endpoint `adicionar_cor.php` parameter `cor` 0.3%
• CVE-2025-53824 Medium 6.4 WeGIA ReflectedCross-Site Scripting (XSS) vulnerability in endpoint 'cadastro_pet.php' parameter 'msg' 0.2%
• CVE-2025-53823 Critical 10.0 WeGIA vulnerable to SQL Injection (Blind Time-Based) in `processa_deletar_socio.php` parameter `id_socio` 0.6%
• CVE-2025-53822 Medium 6.5 WeGIA vulnerable to Reflected Cross-Site Scripting in endpoint 'relatorio_geracao.php' parameter 'tipo_relatorio' 0.3%
• CVE-2025-53821 Medium 4.7 WeGIA vulnerable to Open Redirect in endpoint 'control.php' parameter 'nextPage' 0.3%
• CVE-2025-53820 Medium 6.5 WeGIA vulnerable to Cross-Site Scripting (XSS) Reflected via endpoint 'index.php' parameter 'erro' 0.3%
• CVE-2025-53531 High 8.7 WeGIA allows Uncontrolled Resource Consumption via the fid parameter 0.5%
• CVE-2025-53530 High 8.7 WeGIA allows Uncontrolled Resource Consumption via the errorstr parameter 0.5%
• CVE-2025-53529 Critical 9.8 WeGIA allows SQL Injection in html/funcionario/profile_funcionario.php (id_funcionario parameter) 0.6%
• CVE-2025-53527 High 8.3 WeGIA allows Time-Based Blind SQL Injection in the relatorio_geracao.php endpoint 0.5%
• CVE-2025-53526 Low 2.0 WeGIA allows Stored XSS attacks in novo_memorando.php 0.3%
• CVE-2025-53525 Low 2.0 WebGia allows Cross-Site Scripting (XSS) in profile_familiar.php via the id_dependente parameter 0.3%
• CVE-2025-53377 Low 2.0 WebGia allows Cross-Site Scripting (XSS) in cadastro_dependente_pessoa_nova.php via the id_funcionario parameter 0.3%
• CVE-2025-53091 Critical 10.0 WeGIA has Unauthenticated Time-Based Blind SQL Injection in almox Parameter 0.5%
• CVE-2025-6699 Low 3.5 LabRedesCefetRJ WeGIA Cadastro de Funcionário cadastro_funcionario.php cross site scripting 0.4%
• CVE-2025-6698 Low 3.5 LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoSaida.php cross site scripting 0.4%
• CVE-2025-6697 Low 3.5 LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoEntrada.php cross site scripting 0.4%
• CVE-2025-6696 Low 3.5 LabRedesCefetRJ WeGIA Cadastro de Atendio Cadastro_Atendido.php cross site scripting 0.4%
• CVE-2025-6695 Low 3.5 LabRedesCefetRJ WeGIA Additional Categoria adicionar_categoria.php cross site scripting 0.4%
• CVE-2025-6694 Low 3.5 LabRedesCefetRJ WeGIA Adicionar Unidade adicionar_unidade.php cross site scripting 0.4%
• CVE-2025-52474 High 8.3 WeGIA SQL Injection Vulnerability in id Parameter on control.php Endpoint 0.5%
• CVE-2025-50201 Critical 9.8 WeGIA OS Command Injection in debug_info.php parameter 'branch' 4.7%
• CVE-2025-46828 Critical 10.0 Unauthenticated SQL Injection on get_socios.php endpoint 0.6%
• CVE-2025-30367 Critical 10.0 WeGIA SQL Injection Vulnerability in nextPage Parameter on control.php Endpoint 0.5%
• CVE-2025-30366 Medium 6.2 WeGIA vulnerable to Stored XSS in personalizacao.php 0.3%
• CVE-2025-30365 Critical 9.4 SQL Injection in query_geracao_auto.php 0.7%
• CVE-2025-30364 Critical 10.0 WeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionario 0.7%
• CVE-2025-30363 Medium 6.4 WeGIA vulnerable to Stored XSS in documentos_funcionario.php parameter dados_addInfo 0.3%
• CVE-2025-30362 Medium 6.4 WeGIA vulnerable to Stored XSS in documentos_funcionario.php parameter id 0.3%
• CVE-2025-30361 Critical 9.3 WeGIA Vulnerable to Broken Authentication - Old Password Validation 0.6%
• CVE-2025-29782 Medium 6.4 WeGIA Cross-Site Scripting (XSS) Stored in endpoint `adicionar_tipo_docs_atendido.php` parameter `tipo` 0.3%
• CVE-2025-27499 Medium 6.4 WeGIA has a stored Cross-Site Scripting (XSS) in 'processa_edicao_socio.php' via the 'socio_nome' parameter 0.3%
• CVE-2025-27419 Critical 9.2 Denial of Service (DoS) in WeGIA due to Recursive Crawling of Dynamic URLs 0.6%
• CVE-2025-27420 Medium 6.4 WeGIA contains a Stored Cross-Site Scripting (XSS) in 'atendido_parentesco_adicionar.php' via the 'descricao' parameter 0.3%
• CVE-2025-27418 Medium 6.4 WeGIA contains a Stored Cross-Site Scripting (XSS) in 'adicionar_tipo_atendido.php' via the 'tipo' parameter 0.3%
• CVE-2025-27417 Medium 6.4 WeGIA Contains a Stored Cross-Site Scripting (XSS) in 'adicionar_status_atendido.php' via the 'status' parameter 0.3%
• CVE-2025-27140 Critical 10.0 WeGIA vulnerable to OS Command Injection at endpoint 'importar_dump.php' parameter 'import' (RCE) 2.9%
• CVE-2025-27133 Critical 9.4 WeGIA has SQL Injection endpoint at 'dao/pet/adicionar_tipo_exame.php' parameter 'tipo_exame' 0.6%
• CVE-2025-27096 Critical 9.4 SQL Injection endpoint 'html/personalizacao_upload.php' parameter 'id_campo' in WeGIA 0.6%
• CVE-2025-26605 Critical 9.4 SQL Injection endpoint 'deletar_cargo.php' parameter 'id_cargo' in WeGIA 0.5%
• CVE-2025-26606 Critical 10.0 SQL Injection endpoint 'informacao_adicional.php' parameter 'id_descricao' in WeGIA 0.6%
• CVE-2025-26607 Critical 10.0 SQL Injection endpoint 'documento_excluir.php' parameter 'id_funcionario' in WeGIA 0.6%
• CVE-2025-26608 Critical 10.0 SQL Injection endpoint 'dependente_docdependente.php' parameter 'id_dependente', 'id_doc' in WeGIA 0.6%
• CVE-2025-26609 Critical 10.0 SQL Injection endpoint 'familiar_docfamiliar.php' parameter 'id_dependente', 'id_doc' in WeGIA 0.6%