PT-2025-29916

CVE-2025-54060

Publicado

2025-07-17

Atualizado

2025-07-17

Descrição por

CVSS 4.0

9.4

Crítica

MétricasAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.4.6

Description WeGIA is an open source web manager. A SQL Injection issue was identified that allows an attacker to manipulate SQL queries and access sensitive database information. The vulnerability exists in the idatendido familiares parameter of the /html/funcionario/dependente editarInfoPessoal.php endpoint.

Recommendations Update to version 3.4.6 or later.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Marcelomulder

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')

Identificadores relacionados