CVE-2025-59939

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.5.0

Description WeGIA, a Web manager for charitable institutions, contains a SQL Injection flaw. The issue affects the control.php endpoint, specifically through the id produto parameter. Exploitation can occur via malicious commands injected into the id produto parameter. The issue was addressed in version 3.5.0 through the implementation of prepared statements, sanitization, and validation of the id produto parameter.

Recommendations Update to version 3.5.0 or later. Apply prepared statements methods to the id produto parameter. Implement sanitization and validation on the id produto parameter.