PT-2025-29916

CVE-2025-54060

Published

2025-07-17

Updated

2025-07-17

Description by

CVSS 4.0

9.4

Critical

MetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.4.6

Description WeGIA is an open source web manager. A SQL Injection issue was identified that allows an attacker to manipulate SQL queries and access sensitive database information. The vulnerability exists in the idatendido familiares parameter of the /html/funcionario/dependente editarInfoPessoal.php endpoint.

Recommendations Update to version 3.4.6 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Marcelomulder

Vendors

Affected products

Weakness enumeration

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')

Related identifiers