wegia Vulnerability Advisory Catalog

Total 179 security vulnerabilities recorded for wegia software and firmware.

← Back to All Vendors
Component: wegia

WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting (XSS) vulnerability allows an authentic...

๐Ÿ“… 2026-04-17
CVSS 6.8 Dossier →
Component: wegia

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, the redirect parameter is taken directly from $_GET with no URL validation or whit...

๐Ÿ“… 2026-04-06
CVSS 6.1 Dossier →
Component: wegia

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, open redirect has been found in WeGIA webapp. The redirect parameter is taken dire...

๐Ÿ“… 2026-04-06
CVSS 6.1 Dossier →
Component: wegia

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php e...

๐Ÿ“… 2026-04-06
CVSS 6.1 Dossier →
Component: wegia

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php e...

๐Ÿ“… 2026-04-06
CVSS 6.1 Dossier →
Component: wegia

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, a stored XSS vulnerability allows an attacker to inject malicious scripts through ...

๐Ÿ“… 2026-04-06
CVSS 6.1 Dossier →
Component: wegia

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php e...

๐Ÿ“… 2026-04-06
CVSS 6.1 Dossier →
Component: wegia

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php e...

๐Ÿ“… 2026-04-06
CVSS 6.1 Dossier →
Component: wegia

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, WeGIA (Web gerenciador para instituiรงรตes assistenciais) contains a SQL injection v...

๐Ÿ“… 2026-04-06
CVSS 8.8 Dossier →
Component: wegia

WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file `html/socio/sistema/deletar_tag.php` uses `extract($_REQUEST)` on...

๐Ÿ“… 2026-03-27
CVSS 8.8 Dossier →
CVE-2026-33136 CRITICAL
Component: wegia

WeGIA is a web manager for charitable institutions. Versions 3.6.6 and below have a Reflected Cross-Site Scripting (XSS) vulnerability in the listar_m...

๐Ÿ“… 2026-03-20
CVSS 9.3 Dossier →
CVE-2026-33135 CRITICAL
Component: wegia

WeGIA is a web manager for charitable institutions. Versions 3.6.6 and below have a Reflected Cross-Site Scripting (XSS) vulnerability in the novo_mem...

๐Ÿ“… 2026-03-20
CVSS 9.3 Dossier →
CVE-2026-33134 CRITICAL
Component: wegia

WeGIA is a web manager for charitable institutions. Versions 3.6.5 and below contain an authenticated SQL Injection vulnerability in the html/matPat/r...

๐Ÿ“… 2026-03-20
CVSS 9.3 Dossier →
Component: wegia

WeGIA is a web manager for charitable institutions. In versions 3.6.5 and 3.6.6, the loadBackupDB() function imports SQL files from uploaded backup ar...

๐Ÿ“… 2026-03-20
CVSS 7.2 Dossier →
CVE-2026-31896 CRITICAL
Component: wegia

WeGIA is a web manager for charitable institutions. Prior to version 3.6.6, a critical SQL injection vulnerability exists in the WeGIA application. Th...

๐Ÿ“… 2026-03-11
CVSS 9.8 Dossier →
Component: wegia

WeGIA is a web manager for charitable institutions. Prior to version 3.6.6, WeGIA (Web gerenciador para instituiรงรตes assistenciais) contains a SQL inj...

๐Ÿ“… 2026-03-11
CVSS 8.8 Dossier →
Component: wegia

WeGIA is a web manager for charitable institutions. In 3.6.5, The patched loadBackupDB() extracts tar.gz archives to a temporary directory using PHP's...

๐Ÿ“… 2026-03-11
CVSS 7.5 Dossier →
CVE-2026-28411 CRITICAL
Component: wegia

WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, an unsafe use of the `extract()` function on the `$_REQUEST` superglobal a...

๐Ÿ“… 2026-02-27
CVSS 9.8 Dossier →
CVE-2026-28409 CRITICAL
Component: wegia

WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, a critical Remote Code Execution (RCE) vulnerability exists in the WeGIA a...

๐Ÿ“… 2026-02-27
CVSS 10.0 Dossier →
CVE-2026-28408 CRITICAL
Component: wegia

WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, the script in adicionar_tipo_docs_atendido.php does not go through the pro...

๐Ÿ“… 2026-02-27
CVSS 9.8 Dossier →
Component: wegia

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, The web application is vulnerable to clickjacking attacks. The WeGIA application d...

๐Ÿ“… 2026-01-16
CVSS 4.3 Dossier →
Component: wegia

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php e...

๐Ÿ“… 2026-01-16
CVSS 6.1 Dossier →
Component: wegia

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php e...

๐Ÿ“… 2026-01-16
CVSS 6.1 Dossier →
Component: wegia

WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php e...

๐Ÿ“… 2026-01-16
CVSS 6.1 Dossier →
Page 1 of 8 (179 Total Records)