LabRedesCefetRJ WeGIA

• CVE-2025-26610 Critical 9.4 SQL Injection endpoint 'restaurar_produto_desocultar.php' parameter 'id_produto' in WeGIA 0.6%
• CVE-2025-26611 Critical 10.0 SQL Injection endpoint 'remover_produto.php' parameter 'id_produto' in WeGIA 0.6%
• CVE-2025-26612 Critical 10.0 SQL Injection endpoint 'adicionar_almoxarife.php' parameter 'id_almoxarifado', 'id_funcionario' in WeGIA 0.6%
• CVE-2025-26613 Critical 10.0 OS Command Injection endpoint 'gerenciar_backup.php' parameter 'file' (RCE) in WeGIA 2.5%
• CVE-2025-26614 Critical 9.4 SQL Injection endpoint 'deletar_documento.php' parameter 'id_cargo' in WeGIA 0.6%
• CVE-2025-26615 Critical 10.0 Path Traversal endpoint 'examples.php' parameter 'src' in WeGIA 0.8%
• CVE-2025-26616 Critical 10.0 Path Traversal endpoint 'exportar_dump.php' parameter 'file' in WeGIA 0.7%
• CVE-2025-26617 Critical 10.0 SQL Injection endpoint 'historico_paciente.php' parameter 'id_fichamedica' in WeGIA 0.6%
• CVE-2025-24901 Critical 9.4 SQL Injection endpoint 'deletar_permissao.php' parameter 'c', 'a', 'r' in WeGIA 0.6%
• CVE-2025-24902 Critical 9.4 SQL Injection endpoint 'salvar_cargo.php' parameter 'id_cargo' in WeGIA 0.6%
• CVE-2025-24905 Critical 10.0 SQL Injection endpoint 'get_codigobarras_cobranca.php' parameter 'codigo' in WeGIA 0.5%
• CVE-2025-24906 Critical 10.0 SQL Injection endpoint 'get_detalhes_cobranca.php' parameter 'codigo' in WeGIA 0.6%
• CVE-2025-24957 Critical 10.0 SQL Injection endpoint 'get_detalhes_socio.php' parameter 'id_socio' in WeGIA 0.6%
• CVE-2025-24958 Critical 9.4 SQL Injection endpoint 'salvar_tag.php' parameter 'id_tag' in WeGIA 0.6%
• CVE-2025-24020 Medium 4.8 WeGIA Open Redirect vulnerability 0.3%
• CVE-2025-23220 Critical 10.0 WeGIA has a SQL Injection endpoint 'adicionar_raca.php' parameter 'raca' 0.6%
• CVE-2025-23219 Critical 10.0 WeGIA has a SQL Injection endpoint 'adicionar_cor.php' parameter 'cor' 0.6%
• CVE-2025-23218 Critical 10.0 WeGIA has a SQL Injection endpoint 'adicionar_especie.php' parameter 'especie' 0.6%
• CVE-2025-23038 Medium 6.4 Cross-Site Scripting (XSS) Stored endpoint 'remuneracao.php ' parameter 'descricao' in WeGIA 0.3%
• CVE-2025-23030 Medium 6.4 Cross-Site Scripting (XSS) Reflected endpoint 'cadastro_funcionario.php' parameter 'cpf' in WeGIA 0.3%
• CVE-2025-23031 Medium 6.4 Cross-Site Scripting (XSS) Stored endpoint 'adicionar_alergia.php' parameter 'nome' in WeGIA 0.3%
• CVE-2025-23032 Medium 6.4 Cross-Site Scripting (XSS) Stored endpoint 'adicionar_escala.php' parameter 'escala' in WeGIA 0.3%
• CVE-2025-23033 Medium 6.4 Cross-Site Scripting (XSS) Stored endpoint 'adicionar_situacao.php' parameter 'situacao' in WeGIA 0.3%
• CVE-2025-23034 Medium 6.4 Cross-Site Scripting (XSS) Reflected endpoint 'tags.php' parameter 'msg_e' in WeGIA 0.3%
• CVE-2025-23035 Medium 6.4 Cross-Site Scripting (XSS) Stored endpoint 'adicionar_tipo_quadro_horario.php' parameter 'tipo' in WeGIA 0.3%
• CVE-2025-23036 Medium 6.4 Cross-Site Scripting (XSS) Reflected endpoint 'pre_cadastro_funcionario.php' parameter 'msg_e' in WeGIA 0.3%
• CVE-2025-23037 Medium 6.4 Cross-Site Scripting (XSS) Stored endpoint 'control.php' parameter 'cargo' in WeGIA 0.3%
• CVE-2025-22613 Medium 6.4 WeGIA Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao' 0.4%
• CVE-2025-22614 Medium 6.4 WeGIA Cross-Site Scripting (XSS) Stored endpoint 'dependente_editarInfoPessoal.php ' parameters 'nome' 'SobrenomeForm' 0.3%
• CVE-2025-22615 Medium 6.4 WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'Cadastro_Atendido.php' parameter 'cpf' 0.3%
• CVE-2025-22616 Medium 6.4 WeGIA Cross-Site Scripting (XSS) Stored endpoint 'dependente_parentesco_adicionar.php' parameter 'descricao' 0.3%
• CVE-2025-22617 Medium 6.4 WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_socio.php' parameter 'socio' 0.3%
• CVE-2025-22618 Medium 6.4 WeGIA Cross-Site Scripting (XSS) Stored endpoint 'adicionar_cargo.php' parameter 'cargo' 0.3%
• CVE-2025-22619 Medium 6.4 WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_permissoes.php' parameter 'msg_c' 0.4%
• CVE-2025-22600 Medium 6.5 WeGIA has a Cross-Site Scripting (XSS) Reflected endpoint `configuracao_doacao.php` parameter `avulso` 0.4%
• CVE-2025-22599 Medium 6.5 WeGIA has a Cross-Site Scripting (XSS) Reflected endpoint `home.php` parameter `msg_c` 0.4%
• CVE-2025-22598 High 8.3 WeGIA has a Cross-Site Scripting (XSS) Stored endpoint 'cadastrarSocio.php' parameter 'nome' 0.4%
• CVE-2025-22597 High 8.3 WeGIA has a Cross-Site Scripting (XSS) Stored endpoint 'CobrancaController.php' parameter 'local_recepcao' 0.4%
• CVE-2025-22596 Medium 6.5 WeGIA has a Cross-Site Scripting (XSS) Reflected endpoint 'modulos_visiveis.php' parameter'msg_c' 0.3%
• CVE-2025-22143 Medium 6.4 WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'listar_permissoes.php' parameter 'msg_e' 0.3%