WeGIA
2025
- CVE-2025-52474: SQL Injection Vulnerability in id Parameter on control.php Endpoint Jun 19
- CVE-2025-30367: SQL Injection endpoint control.php parameter nextPage Mar 27
- CVE-2025-30366: Multiples Stored XSS in personalizacao.php Mar 27
- CVE-2024-57035: SQL Injection Vulnerability in nextPage Parameter on control.php Endpoint Jan 17
- CVE-2024-57034: SQL Injection in query_geracao_auto.php Jan 17
- CVE-2024-57033: Cross-Site Scripting (XSS) Stored in documentos_funcionario.php parameter dados_addInfo Jan 17
- CVE-2024-57032: Broken Authentication - Old Password Jan 17
- CVE-2024-57031: SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionario Jan 17
- CVE-2024-57030: Cross-Site Scripting (XSS) Stored in documentos_funcionario.php parameter id Jan 17
- CVE-2025-22600: Cross-Site Scripting (XSS) Reflected endpoint configuracao_doacao.php parameter avulso Jan 10
- CVE-2025-22599: Cross-Site Scripting (XSS) Reflected endpoint home.php parameter msg_c Jan 10
- CVE-2025-22139: Cross-Site Scripting (XSS) Reflected endpoint configuracao_geral.php parameter msg Jan 8
- CVE-2025-22133: Arbitrary File Upload with Remote Code Execution (RCE) Jan 7
- CVE-2025-22132: Cross-Site Scripting (XSS) in File Upload Field Jan 7
2024