Login Request a demo
LA
Vendor
LabRedesCefetRJ
1 product with CVEs on record
187
CVEs
0
On KEV
6
New 30D
Products
WE
WeGIA
LabRedesCefetRJ
9.8
187 CVEs0 on KEV6 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-55684
WE
WeGIA
LabRedesCefetRJ
9.8
0%
Oct 14WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php
CVE-2026-55682
WE
WeGIA
LabRedesCefetRJ
8.1
0%
Oct 14WeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.php
CVE-2026-55681
WE
WeGIA
LabRedesCefetRJ
8.8
1%
Oct 14WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameter
CVE-2026-55679
WE
WeGIA
LabRedesCefetRJ
6.5
1%
Oct 14WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection
CVE-2026-55680
WE
WeGIA
LabRedesCefetRJ
9.8
0%
Oct 14WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter
CVE-2026-55683
WE
WeGIA
LabRedesCefetRJ
9.8
1%
Oct 14WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php
CVE-2026-54767
WE
WeGIA
LabRedesCefetRJ
9.1
1%
Sep 17WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php
CVE-2026-54671
WE
WeGIA
LabRedesCefetRJ
8.8
1%
Sep 17WeGIA: Authorization Bypass via Empty Resource Array in InternoControle
CVE-2026-54670
WE
WeGIA
LabRedesCefetRJ
9.1
1%
Sep 17WeGIA: Unauthenticated Auth Bypass + Local File Inclusion
CVE-2026-76634
WE
WeGIA
LabRedesCefetRJ
6.5
0%
Aug 20WeGIA < 3.9.2 Insecure Direct Object Reference via profile_funcionario.php
CVE-2026-76633
WE
WeGIA
LabRedesCefetRJ
8.1
0%
Aug 20WeGIA < 3.9.2 Authorization Bypass Password Change via alterarSenha
CVE-2026-45335
WE
WeGIA
LabRedesCefetRJ
5.4
0%
May 27WeGIA: Middleware whitelist bypass → open redirect via InternoControle.nextPage
CVE-2026-45027
WE
WeGIA
LabRedesCefetRJ
5.9
0%
May 27WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.php
CVE-2026-45026
WE
WeGIA
LabRedesCefetRJ
6.8
0%
May 11WeGIA: Stored XSS in html/atendido/processo_aceitacao.php
CVE-2026-45025
WE
WeGIA
LabRedesCefetRJ
6.8
0%
May 11WeGIA: Stored XSS in html/atendido/etapa_processo.php
CVE-2026-42873
WE
WeGIA
LabRedesCefetRJ
0.0
0%
May 11WeGIA: Error Handling Upload DocDependente
CVE-2026-42872
WE
WeGIA
LabRedesCefetRJ
6.1
0%
May 11WeGIA: Reflected XSS in listar_arquivos_etapa.php
CVE-2026-42870
WE
WeGIA
LabRedesCefetRJ
6.4
0%
May 11WeGIA: Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao'
CVE-2026-42871
WE
WeGIA
LabRedesCefetRJ
6.9
0%
May 11WeGIA: Error Handling familiar_docfamiliar
CVE-2026-40286
WE
WeGIA
LabRedesCefetRJ
7.5
0%
Apr 17WeGIA has Cross-Site Scripting in Controle de Contribuição
CVE-2026-40285
WE
WeGIA
LabRedesCefetRJ
8.8
0%
Apr 17WeGIA has SQL Injection via Session Variable Override in DespachoControle.php
CVE-2026-40284
WE
WeGIA
LabRedesCefetRJ
6.8
0%
Apr 17WeGIA has stored XSS in listar_despachos.php
CVE-2026-40282
WE
WeGIA
LabRedesCefetRJ
6.4
0%
Apr 17WeGIA has stored XSS in intercorrencia_visualizar.php
CVE-2026-40283
WE
WeGIA
LabRedesCefetRJ
7.6
0%
Apr 17WeGIA has stored XSS in profile_paciente.php
CVE-2026-35475
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Apr 6WeGIA - Open Redirect - backup redirection — Unvalidated $_GET['redirect']
CVE-2026-35474
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Apr 6WeGIA - Open Redirect - atualizacao redirection - Unvalidated $_GET['redirect']
CVE-2026-35473
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Apr 6WeGIA - Open Redirect - IentradaControle - listarId() - Unvalidated $_GET['nextPage']
CVE-2026-35399
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Apr 6WeGIA has Stored XSS in backup file names
CVE-2026-35472
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Apr 6WeGIA - Open Redirect - EstoqueControle - listarTodos() - Unvalidated $_GET['nextPage']
CVE-2026-35398
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Apr 6WeGIA - Open Redirect - OrigemControle - listarTodos() & listarId_Nome() - Unvalidated $_GET['nextPage']
CVE-2026-35396
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Apr 6WeGIA - Open Redirect - IsaidaControle - listarId() - Unvalidated $_GET['nextPage']
CVE-2026-35395
WE
WeGIA
LabRedesCefetRJ
8.8
0%
Apr 6WeGIA has a SQL Injection in DespachoDAO.php via id_memorando parameter
CVE-2026-33991
WE
WeGIA
LabRedesCefetRJ
8.8
0%
Mar 27WeGIA has SQL Injection in deletar_tag.php
CVE-2026-33136
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Mar 20WeGIA has Reflected Cross-Site Scripting (XSS) in `listar_memorandos_ativos.php` via `sccd` parameter
CVE-2026-33135
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Mar 20WeGIA has Reflected Cross-Site Scripting (XSS) in `novo_memorandoo.php` via `sccs` parameter
CVE-2026-33134
WE
WeGIA
LabRedesCefetRJ
8.8
0%
Mar 20WeGIA has Authenticated Time-Based Blind SQL Injection in `restaurar_produto.php` via `id_produto` parameter
CVE-2026-33133
WE
WeGIA
LabRedesCefetRJ
7.2
0%
Mar 20WeGIA has an arbitrary SQL execution vulnerability via crafted backup archive
CVE-2026-31896
WE
WeGIA
LabRedesCefetRJ
9.8
0%
Mar 11WeGIA has a Time-Based Blind SQL Injection in remover_produto_ocultar.php
CVE-2026-31895
WE
WeGIA
LabRedesCefetRJ
8.8
0%
Mar 11WeGIA has a SQL Injection via Direct Query Interpolation in restaurar_produto.php
CVE-2026-31894
WE
WeGIA
LabRedesCefetRJ
7.5
0%
Mar 11WeGIA affected by arbitrary file read via symlink in backup restore
CVE-2026-28411
WE
WeGIA
LabRedesCefetRJ
9.8
3%
Feb 27WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`
CVE-2026-28409
WE
WeGIA
LabRedesCefetRJ
7.2
4%
Feb 27WeGIA Vulnerable to Remote Code Execution (RCE) via OS Command Injection
CVE-2026-28408
WE
WeGIA
LabRedesCefetRJ
9.8
1%
Feb 27WeGIA lacks authentication verification in adicionar_tipo_docs_atendido.php
CVE-2026-23731
WE
WeGIA
LabRedesCefetRJ
4.3
0%
Jan 16WeGIA Clickjacking Vulnerability
CVE-2026-23730
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Jan 16WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=ProdutoControle)
CVE-2026-23729
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Jan 16WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle)
CVE-2026-23728
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Jan 16WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle)
CVE-2026-23727
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Jan 16WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle)
CVE-2026-23726
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Jan 16WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle)
CVE-2026-23725
WE
WeGIA
LabRedesCefetRJ
5.4
0%
Jan 16WeGIA Stored Cross-Site Scripting (XSS) – nome Parameter on Adopters Information Page
CVE-2026-23724
WE
WeGIA
LabRedesCefetRJ
5.4
0%
Jan 16WeGIA Stored Cross-Site Scripting (XSS) – atendido_idatendido Parameter on Occurrence Registration Page
CVE-2026-23722
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Jan 16WeGIA has a Reflected Cross-Site Scripting (XSS) vulnerability allowing arbitrary code execution and UI redressing.
CVE-2026-23723
WE
WeGIA
LabRedesCefetRJ
7.2
0%
Jan 16WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameter
CVE-2025-67501
WE
WeGIA
LabRedesCefetRJ
8.8
1%
Dec 9WeGIA is vulnerable to SQL Injection via editar_categoria endpoint parameter
CVE-2025-67496
WE
WeGIA
LabRedesCefetRJ
5.4
0%
Dec 9WeGia is Vulnerable to XSS through id_pessoa Parameter on Password Configuration Page
CVE-2025-62598
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Oct 21WeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'action'
CVE-2025-62597
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Oct 21WeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'sql'
CVE-2025-62361
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Oct 13WeGIA Open Redirect Vulnerability in `control.php` endpoint `nextPage` parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle)
CVE-2025-62360
WE
WeGIA
LabRedesCefetRJ
8.8
1%
Oct 13WeGIA SQL Injection via 'id_dependente' param at endpoint `/html/funcionario/dependente_documento.php`
CVE-2025-62359
WE
WeGIA
LabRedesCefetRJ
6.1
0%
Oct 13WeGIA Cross-Site Scripting (XSS) Reflected endpoint id_pet