WE
Product
WeGIA
187
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 40High 50Medium 96Low 0
Watch
Add WeGIA to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-55684 | 9.8 | Oct 14 | WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php Affected: < 3.8.6 |
| CVE-2026-55680 | 9.8 | Oct 14 | WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter Affected: < 3.8.6 |
| CVE-2026-55683 | 9.8 | Oct 14 | WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php Affected: < 3.8.6 |
| CVE-2026-31896 | 9.8 | Mar 11 | WeGIA has a Time-Based Blind SQL Injection in remover_produto_ocultar.php Affected: < 3.6.6 |
| CVE-2026-28411 | 9.8 | Feb 27 | WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)` Affected: < 3.6.5 |
| CVE-2026-28408 | 9.8 | Feb 27 | WeGIA lacks authentication verification in adicionar_tipo_docs_atendido.php Affected: < 3.6.5 |
| CVE-2025-61605 | 9.8 | Oct 2 | WeGIA: SQL Injection (Blind Time-Based) Vulnerability in /pet/profile_pet.php Endpoint Affected: < 3.5.0 |
| CVE-2025-61603 | 9.8 | Oct 2 | WeGIA: SQL Injection (Blind Time-Based) Vulnerability in API `descricao` Parameter Affected: < 3.5.0 |
| CVE-2025-55168 | 9.8 | Aug 12 | WeGIA SQL Injection via id_fichamedica at endpoint `GET /html/saude/aplicar_medicamento.php` Affected: < 3.4.8 |
| CVE-2025-55167 | 9.8 | Aug 12 | WeGIA SQL Injection via id_fichamedica at endpoint `GET/html/funcionario/dependente_remover.php` Affected: < 3.4.8 |
| CVE-2025-53937 | 9.8 | Jul 16 | WeGIA has SQL Injection (Blind Time-Based) Vulnerability in `cargo` Parameter on `control.php` Endpoint Affected: < 3.4.5 |
| CVE-2025-53529 | 9.8 | Jul 7 | WeGIA allows SQL Injection in html/funcionario/profile_funcionario.php (id_funcionario parameter) Affected: < 3.4.3 |
| CVE-2025-53527 | 9.8 | Jul 7 | WeGIA allows Time-Based Blind SQL Injection in the relatorio_geracao.php endpoint Affected: >= 3.3.3, < 3.4.1 |
| CVE-2025-53091 | 9.8 | Jun 27 | WeGIA has Unauthenticated Time-Based Blind SQL Injection in almox Parameter Affected: = 3.3.3 |
| CVE-2025-52474 | 9.8 | Jun 19 | WeGIA SQL Injection Vulnerability in id Parameter on control.php Endpoint Affected: < 3.4.2 |
| CVE-2025-50201 | 9.8 | Jun 19 | WeGIA OS Command Injection in debug_info.php parameter 'branch' Affected: < 3.4.2 |
| CVE-2025-46828 | 9.8 | May 7 | Unauthenticated SQL Injection on get_socios.php endpoint Affected: < 3.3.1 |
| CVE-2025-30367 | 9.8 | Mar 27 | WeGIA SQL Injection Vulnerability in nextPage Parameter on control.php Endpoint Affected: < 3.2.6 |
| CVE-2025-30365 | 9.8 | Mar 27 | SQL Injection in query_geracao_auto.php Affected: < 3.2.8 |
| CVE-2025-30364 | 9.8 | Mar 27 | WeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionario Affected: < 3.2.8 |
| CVE-2025-30361 | 9.8 | Mar 27 | WeGIA Vulnerable to Broken Authentication - Old Password Validation Affected: < 3.2.6 |
| CVE-2025-27140 | 9.8 | Feb 24 | WeGIA vulnerable to OS Command Injection at endpoint 'importar_dump.php' parameter 'import' (RCE) Affected: < 3.2.15 |
| CVE-2025-27096 | 9.8 | Feb 20 | SQL Injection endpoint 'html/personalizacao_upload.php' parameter 'id_campo' in WeGIA Affected: < 3.2.14 |
| CVE-2025-26606 | 9.8 | Feb 18 | SQL Injection endpoint 'informacao_adicional.php' parameter 'id_descricao' in WeGIA Affected: < 3.2.13 |
| CVE-2025-26607 | 9.8 | Feb 18 | SQL Injection endpoint 'documento_excluir.php' parameter 'id_funcionario' in WeGIA Affected: < 3.2.13 |
| CVE-2025-26608 | 9.8 | Feb 18 | SQL Injection endpoint 'dependente_docdependente.php' parameter 'id_dependente', 'id_doc' in WeGIA Affected: < 3.2.13 |
| CVE-2025-26609 | 9.8 | Feb 18 | SQL Injection endpoint 'familiar_docfamiliar.php' parameter 'id_dependente', 'id_doc' in WeGIA Affected: < 3.2.13 |
| CVE-2025-26610 | 9.8 | Feb 18 | SQL Injection endpoint 'restaurar_produto_desocultar.php' parameter 'id_produto' in WeGIA Affected: < 3.2.13 |
| CVE-2025-26611 | 9.8 | Feb 18 | SQL Injection endpoint 'remover_produto.php' parameter 'id_produto' in WeGIA Affected: < 3.2.13 |
| CVE-2025-26612 | 9.8 | Feb 18 | SQL Injection endpoint 'adicionar_almoxarife.php' parameter 'id_almoxarifado', 'id_funcionario' in WeGIA Affected: < 3.2.13 |
| CVE-2025-26613 | 9.8 | Feb 18 | OS Command Injection endpoint 'gerenciar_backup.php' parameter 'file' (RCE) in WeGIA Affected: < 3.2.14 |
| CVE-2025-26617 | 9.8 | Feb 18 | SQL Injection endpoint 'historico_paciente.php' parameter 'id_fichamedica' in WeGIA Affected: < 3.2.14 |
| CVE-2025-24905 | 9.8 | Feb 3 | SQL Injection endpoint 'get_codigobarras_cobranca.php' parameter 'codigo' in WeGIA Affected: < 3.2.12 |
| CVE-2025-24906 | 9.8 | Feb 3 | SQL Injection endpoint 'get_detalhes_cobranca.php' parameter 'codigo' in WeGIA Affected: < 3.2.12 |
| CVE-2025-24957 | 9.8 | Feb 3 | SQL Injection endpoint 'get_detalhes_socio.php' parameter 'id_socio' in WeGIA Affected: < 3.2.12 |
| CVE-2025-23220 | 9.8 | Jan 20 | WeGIA has a SQL Injection endpoint 'adicionar_raca.php' parameter 'raca' Affected: < 3.2.10 |
| CVE-2025-23219 | 9.8 | Jan 20 | WeGIA has a SQL Injection endpoint 'adicionar_cor.php' parameter 'cor' Affected: < 3.2.10 |
| CVE-2025-23218 | 9.8 | Jan 20 | WeGIA has a SQL Injection endpoint 'adicionar_especie.php' parameter 'especie' Affected: < 3.2.10 |
| CVE-2026-54767 | 9.1 | Sep 17 | WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php Affected: < 3.8.5 |
| CVE-2026-54670 | 9.1 | Sep 17 | WeGIA: Unauthenticated Auth Bypass + Local File Inclusion Affected: < 3.8.5 |
Showing 40
