PT-2025-50293 · Wegia · Wegia
CVSS v4.0
9.4
Critical
| Vector | AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H |
Name of the Vulnerable Software and Affected Versions
WeGIA versions 3.5.4 and below
Description
WeGIA is a web manager for institutions, primarily for Portuguese language users. The application does not properly validate and sanitize user inputs in the
id categoria parameter of the /html/matPat/editar categoria.php endpoint, allowing attackers to inject malicious SQL payloads for direct execution. This could lead to complete system compromise, requiring administrative privileges for exploitation.Recommendations
Update to version 3.5.5 or later.
Exploit
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wegia