LabRedesCefetRJ WeGIA vulnerabilities
190 published CVEs name LabRedesCefetRJ WeGIA among the affected products.
- 190Published CVEs189 of them scored
- 58Last 12 monthspublished in the last year
- 65Critical29 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-61719
WeGIA: Stored Cross-Site Scripting (XSS) in "historico_prontuarios.php" via "textoProntuario" Field
LabRedesCefetRJ · WeGIA
High8.9 - CVE-2026-61673
WeGIA: Stored DOM XSS in listar_despachos.php Allows Account Takeover
LabRedesCefetRJ · WeGIA
Medium6.3 - CVE-2026-61671
WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle Classes
LabRedesCefetRJ · WeGIA
High8.1 - CVE-2026-55684
WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php
LabRedesCefetRJ · WeGIA
Critical9.8 - CVE-2026-55682
WeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.php
LabRedesCefetRJ · WeGIA
High8.1 - CVE-2026-55681
WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameter
LabRedesCefetRJ · WeGIA
High8.8 - CVE-2026-55679
WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection
LabRedesCefetRJ · WeGIA
Medium6.5 - CVE-2026-55680
WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter
LabRedesCefetRJ · WeGIA
Critical9.8 - CVE-2026-55683
WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php
LabRedesCefetRJ · WeGIA
Critical9.8 - CVE-2026-54767
WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php
LabRedesCefetRJ · WeGIA
Critical9.1