WE
Product
WeGIA
by LabRedesCefetRJ · last CVE Oct 14, 2026
187
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 40High 50Medium 96Low 0
Watch

Add WeGIA to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-55684
9.8
0%
Oct 14
WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php
Affected: < 3.8.6
CVE-2026-55680
9.8
0%
Oct 14
WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter
Affected: < 3.8.6
CVE-2026-55683
9.8
1%
Oct 14
WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php
Affected: < 3.8.6
CVE-2026-31896
9.8
0%
Mar 11
WeGIA has a Time-Based Blind SQL Injection in remover_produto_ocultar.php
Affected: < 3.6.6
CVE-2026-28411
9.8
3%
Feb 27
WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`
Affected: < 3.6.5
CVE-2026-28408
9.8
1%
Feb 27
WeGIA lacks authentication verification in adicionar_tipo_docs_atendido.php
Affected: < 3.6.5
CVE-2025-61605
9.8
0%
Oct 2
WeGIA: SQL Injection (Blind Time-Based) Vulnerability in /pet/profile_pet.php Endpoint
Affected: < 3.5.0
CVE-2025-61603
9.8
0%
Oct 2
WeGIA: SQL Injection (Blind Time-Based) Vulnerability in API `descricao` Parameter
Affected: < 3.5.0
CVE-2025-55168
9.8
0%
Aug 12
WeGIA SQL Injection via id_fichamedica at endpoint `GET /html/saude/aplicar_medicamento.php`
Affected: < 3.4.8
CVE-2025-55167
9.8
1%
Aug 12
WeGIA SQL Injection via id_fichamedica at endpoint `GET/html/funcionario/dependente_remover.php`
Affected: < 3.4.8
CVE-2025-53937
9.8
1%
Jul 16
WeGIA has SQL Injection (Blind Time-Based) Vulnerability in `cargo` Parameter on `control.php` Endpoint
Affected: < 3.4.5
CVE-2025-53529
9.8
1%
Jul 7
WeGIA allows SQL Injection in html/funcionario/profile_funcionario.php (id_funcionario parameter)
Affected: < 3.4.3
CVE-2025-53527
9.8
0%
Jul 7
WeGIA allows Time-Based Blind SQL Injection in the relatorio_geracao.php endpoint
Affected: >= 3.3.3, < 3.4.1
CVE-2025-53091
9.8
1%
Jun 27
WeGIA has Unauthenticated Time-Based Blind SQL Injection in almox Parameter
Affected: = 3.3.3
CVE-2025-52474
9.8
0%
Jun 19
WeGIA SQL Injection Vulnerability in id Parameter on control.php Endpoint
Affected: < 3.4.2
CVE-2025-50201
9.8
5%
Jun 19
WeGIA OS Command Injection in debug_info.php parameter 'branch'
Affected: < 3.4.2
CVE-2025-46828
9.8
1%
May 7
Unauthenticated SQL Injection on get_socios.php endpoint
Affected: < 3.3.1
CVE-2025-30367
9.8
1%
Mar 27
WeGIA SQL Injection Vulnerability in nextPage Parameter on control.php Endpoint
Affected: < 3.2.6
CVE-2025-30365
9.8
1%
Mar 27
SQL Injection in query_geracao_auto.php
Affected: < 3.2.8
CVE-2025-30364
9.8
1%
Mar 27
WeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionario
Affected: < 3.2.8
CVE-2025-30361
9.8
1%
Mar 27
WeGIA Vulnerable to Broken Authentication - Old Password Validation
Affected: < 3.2.6
CVE-2025-27140
9.8
3%
Feb 24
WeGIA vulnerable to OS Command Injection at endpoint 'importar_dump.php' parameter 'import' (RCE)
Affected: < 3.2.15
CVE-2025-27096
9.8
1%
Feb 20
SQL Injection endpoint 'html/personalizacao_upload.php' parameter 'id_campo' in WeGIA
Affected: < 3.2.14
CVE-2025-26606
9.8
1%
Feb 18
SQL Injection endpoint 'informacao_adicional.php' parameter 'id_descricao' in WeGIA
Affected: < 3.2.13
CVE-2025-26607
9.8
1%
Feb 18
SQL Injection endpoint 'documento_excluir.php' parameter 'id_funcionario' in WeGIA
Affected: < 3.2.13
CVE-2025-26608
9.8
1%
Feb 18
SQL Injection endpoint 'dependente_docdependente.php' parameter 'id_dependente', 'id_doc' in WeGIA
Affected: < 3.2.13
CVE-2025-26609
9.8
1%
Feb 18
SQL Injection endpoint 'familiar_docfamiliar.php' parameter 'id_dependente', 'id_doc' in WeGIA
Affected: < 3.2.13
CVE-2025-26610
9.8
1%
Feb 18
SQL Injection endpoint 'restaurar_produto_desocultar.php' parameter 'id_produto' in WeGIA
Affected: < 3.2.13
CVE-2025-26611
9.8
1%
Feb 18
SQL Injection endpoint 'remover_produto.php' parameter 'id_produto' in WeGIA
Affected: < 3.2.13
CVE-2025-26612
9.8
1%
Feb 18
SQL Injection endpoint 'adicionar_almoxarife.php' parameter 'id_almoxarifado', 'id_funcionario' in WeGIA
Affected: < 3.2.13
CVE-2025-26613
9.8
3%
Feb 18
OS Command Injection endpoint 'gerenciar_backup.php' parameter 'file' (RCE) in WeGIA
Affected: < 3.2.14
CVE-2025-26617
9.8
1%
Feb 18
SQL Injection endpoint 'historico_paciente.php' parameter 'id_fichamedica' in WeGIA
Affected: < 3.2.14
CVE-2025-24905
9.8
1%
Feb 3
SQL Injection endpoint 'get_codigobarras_cobranca.php' parameter 'codigo' in WeGIA
Affected: < 3.2.12
CVE-2025-24906
9.8
1%
Feb 3
SQL Injection endpoint 'get_detalhes_cobranca.php' parameter 'codigo' in WeGIA
Affected: < 3.2.12
CVE-2025-24957
9.8
1%
Feb 3
SQL Injection endpoint 'get_detalhes_socio.php' parameter 'id_socio' in WeGIA
Affected: < 3.2.12
CVE-2025-23220
9.8
1%
Jan 20
WeGIA has a SQL Injection endpoint 'adicionar_raca.php' parameter 'raca'
Affected: < 3.2.10
CVE-2025-23219
9.8
1%
Jan 20
WeGIA has a SQL Injection endpoint 'adicionar_cor.php' parameter 'cor'
Affected: < 3.2.10
CVE-2025-23218
9.8
1%
Jan 20
WeGIA has a SQL Injection endpoint 'adicionar_especie.php' parameter 'especie'
Affected: < 3.2.10
CVE-2026-54767
9.1
1%
Sep 17
WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php
Affected: < 3.8.5
CVE-2026-54670
9.1
1%
Sep 17
WeGIA: Unauthenticated Auth Bypass + Local File Inclusion
Affected: < 3.8.5
Showing 40