WeGIA vulnerable to SQL Injection via 'id_funcionario' param at endpoint `/html/funcionario/dependente_listar.php`

WeGIA vulnerable to SQL Injection into method `excluir` of the `ProdutoControle` class in the parameter `id_produto`.

WeGIA has a bypass for the fix for CVE-2025-22133 - Arbitrary File Upload leads to Remote Code Execution (RCE)

WeGIA Authenticated Arbitrary File Upload Leading To Remote Code Execution (RCE)

WeGIA SQL Injection vulnerability via 'id_funcionario' param at endpoint `/html/funcionario/dependente_remover.php`

WeGIA vulnerable to SQL Injection (Blind Time-Based) in endpoint 'Profile_Atendido.php' parameter 'idatendido'

WeGIA SQL Injection (Blind Time-Based) Vulnerability in id_dependente Parameter on profile_dependente.php Endpoint

WeGIASQL Injection (Blind Time-Based) Vulnerability in idatendido_familiares Parameter on dependente_editarDoc.php Endpoint

WeGIA SQL Injection (Blind Time-Based) Vulnerability in idatendido_familiares Parameter on dependente_editarInfoPessoal.php Endpoint

WeGIA SQL Injection (Blind Time-Based) Vulnerability in idatendido_familiares Parameter on dependente_editarEndereco.php Endpoint

WeGIA vulnerable to SQL Injection in endpoint profile_paciente.php parameter id_fichamedica

WeGIA vulnerable to SQL Injection (Blind Time-Based) in `processa_deletar_socio.php` parameter `id_socio`

WeGIA has SQL Injection endpoint at 'dao/pet/adicionar_tipo_exame.php' parameter 'tipo_exame'

SQL Injection endpoint 'deletar_cargo.php' parameter 'id_cargo' in WeGIA

SQL Injection endpoint 'deletar_documento.php' parameter 'id_cargo' in WeGIA

SQL Injection endpoint 'deletar_permissao.php' parameter 'c', 'a', 'r' in WeGIA

SQL Injection endpoint 'salvar_cargo.php' parameter 'id_cargo' in WeGIA

SQL Injection endpoint 'salvar_tag.php' parameter 'id_tag' in WeGIA

WeGIA vulnerable to Blind Time-Based SQL Injection in endpoint 'listar_despachos.php' parameter 'id_memorando'

WeGIA vulnerable to Blind Time-Based SQL Injection in endpoint 'exibe_anexo.php' parameter 'id_anexo'

WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'pre_cadastro_adotante.php' parameter 'msg_e'

WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'cargos.php' parameter 'msg_e'

WeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.php

WeGIA < 3.9.2 Authorization Bypass Password Change via alterarSenha

WeGIA has stored XSS in profile_paciente.php

WeGIA has Cross-Site Scripting in Controle de Contribuição

WeGIA affected by arbitrary file read via symlink in backup restore

WeGIA: Broken Access Control in `get_relatorios_socios.php` Endpoint

WeGIA Anonymous Attacker can Delete Arbitrary Image file at endpoint `/html/personalizacao_remover.php`

WeGIA vulnerable to Authentication Bypass due to Missing Session Validation in multiple endpoints

WeGIA allows Uncontrolled Resource Consumption via the fid parameter

WeGIA allows Uncontrolled Resource Consumption via the errorstr parameter

Denial of Service (DoS) in WeGIA due to Recursive Crawling of Dynamic URLs

Path Traversal endpoint 'examples.php' parameter 'src' in WeGIA

Path Traversal endpoint 'exportar_dump.php' parameter 'file' in WeGIA

WeGIA reflected XSS via `verificacao` and `redir_config` param at endpoint `/html/alterar_senha.php`

WeGIA has an arbitrary SQL execution vulnerability via crafted backup archive

WeGIA Vulnerable to Remote Code Execution (RCE) via OS Command Injection

WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameter

WeGIA: Cross-Site Request Forgery (CSRF) Vulnerability in `control.php` Endpoint

WeGIA: Error Handling familiar_docfamiliar

WeGIA: Stored XSS in html/atendido/processo_aceitacao.php

WeGIA: Stored XSS in html/atendido/etapa_processo.php

WeGIA has stored XSS in listar_despachos.php

WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection

WeGIA < 3.9.2 Insecure Direct Object Reference via profile_funcionario.php

WeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'

WeGIA has a Cross-Site Scripting (XSS) Reflected endpoint `configuracao_doacao.php` parameter `avulso`

WeGIA has a Cross-Site Scripting (XSS) Reflected endpoint `home.php` parameter `msg_c`

WeGIA has a Cross-Site Scripting (XSS) Reflected endpoint 'modulos_visiveis.php' parameter'msg_c'