Skip to content
NnilsonLazarin
Products
| Product | CVEs | Exploited | Latest |
|---|
| WeGIA | 5 | – | Jan 8, 2025 |
Exploited and recent CVEs
-
CVE-2025-22141
Critical 9.4
WeGIA SQL Injection (Blind Time-Based) endpoint 'verificar_recursos_cargo.php' parameter 'cargo'
0.7%
-
CVE-2025-22139
Medium 6.4
WeGIA Cross-Site Scripting (XSS) Reflected endpoint `configuracao_geral.php` parameter `msg`
0.3%
-
CVE-2025-22140
Critical 9.4
WeGIA SQL Injection (Blind Time-Based) endpoint 'dependente_listar_um.php' parameter 'id_dependente'
0.7%
-
CVE-2025-22133
Critical 10.0
WeGIA Allows Arbitrary File Upload with Remote Code Execution (RCE)
0.8%
-
CVE-2025-22132
High 8.3
WeGIA has a Cross-Site Scripting (XSS) in File Upload Field
0.4%