# LabRedesCefetRJ WeGIA. Every CVE that names LabRedesCefetRJ WeGIA among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [LabRedesCefetRJ WeGIA Cadastro de Funcionário cadastro_funcionario.php cross site scripting](https://agentprime.io/advisories/CVE-2025-6699.md) `CVE-2025-6699` · CVE record: LabRedesCefetRJ WeGIA · CVSS 5.1 Medium · Not analysed yet · Published 26 Jun 2025 · Tags: Cross-site scripting (XSS), Code injection - [LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoSaida.php cross site scripting](https://agentprime.io/advisories/CVE-2025-6698.md) `CVE-2025-6698` · CVE record: LabRedesCefetRJ WeGIA · CVSS 5.1 Medium · Not analysed yet · Published 26 Jun 2025 · Tags: Cross-site scripting (XSS), Code injection - [LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoEntrada.php cross site scripting](https://agentprime.io/advisories/CVE-2025-6697.md) `CVE-2025-6697` · CVE record: LabRedesCefetRJ WeGIA · CVSS 5.1 Medium · Not analysed yet · Published 26 Jun 2025 · Tags: Cross-site scripting (XSS), Code injection - [LabRedesCefetRJ WeGIA Cadastro de Atendio Cadastro_Atendido.php cross site scripting](https://agentprime.io/advisories/CVE-2025-6696.md) `CVE-2025-6696` · CVE record: LabRedesCefetRJ WeGIA · CVSS 5.1 Medium · Not analysed yet · Published 26 Jun 2025 · Tags: Cross-site scripting (XSS), Code injection - [LabRedesCefetRJ WeGIA Additional Categoria adicionar_categoria.php cross site scripting](https://agentprime.io/advisories/CVE-2025-6695.md) `CVE-2025-6695` · CVE record: LabRedesCefetRJ WeGIA · CVSS 5.1 Medium · Not analysed yet · Published 26 Jun 2025 · Tags: Cross-site scripting (XSS), Code injection - [LabRedesCefetRJ WeGIA Adicionar Unidade adicionar_unidade.php cross site scripting](https://agentprime.io/advisories/CVE-2025-6694.md) `CVE-2025-6694` · CVE record: LabRedesCefetRJ WeGIA · CVSS 5.1 Medium · Not analysed yet · Published 26 Jun 2025 · Tags: Cross-site scripting (XSS), Code injection - [WeGIA SQL Injection Vulnerability in id Parameter on control.php Endpoint](https://agentprime.io/advisories/CVE-2025-52474.md) `CVE-2025-52474` · CVE record: LabRedesCefetRJ WeGIA · CVSS 8.3 High · Not analysed yet · Published 19 Jun 2025 · Tags: SQL injection - [WeGIA OS Command Injection in debug_info.php parameter 'branch'](https://agentprime.io/advisories/CVE-2025-50201.md) `CVE-2025-50201` · CVE record: LabRedesCefetRJ WeGIA · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jun 2025 · Tags: Command injection - [Unauthenticated SQL Injection on get_socios.php endpoint](https://agentprime.io/advisories/CVE-2025-46828.md) `CVE-2025-46828` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2025 · Tags: SQL injection - [WeGIA SQL Injection Vulnerability in nextPage Parameter on control.php Endpoint](https://agentprime.io/advisories/CVE-2025-30367.md) `CVE-2025-30367` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2025 · Tags: SQL injection - [WeGIA vulnerable to Stored XSS in personalizacao.php](https://agentprime.io/advisories/CVE-2025-30366.md) `CVE-2025-30366` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.2 Medium · Not analysed yet · Published 27 Mar 2025 · Tags: Cross-site scripting (XSS) - [SQL Injection in query_geracao_auto.php](https://agentprime.io/advisories/CVE-2025-30365.md) `CVE-2025-30365` · CVE record: LabRedesCefetRJ WeGIA · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2025 · Tags: SQL injection - [WeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionario](https://agentprime.io/advisories/CVE-2025-30364.md) `CVE-2025-30364` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2025 · Tags: SQL injection - [WeGIA vulnerable to Stored XSS in documentos_funcionario.php parameter dados_addInfo](https://agentprime.io/advisories/CVE-2025-30363.md) `CVE-2025-30363` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 27 Mar 2025 · Tags: Cross-site scripting (XSS) - [WeGIA vulnerable to Stored XSS in documentos_funcionario.php parameter id](https://agentprime.io/advisories/CVE-2025-30362.md) `CVE-2025-30362` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 27 Mar 2025 · Tags: Cross-site scripting (XSS) - [WeGIA Vulnerable to Broken Authentication - Old Password Validation](https://agentprime.io/advisories/CVE-2025-30361.md) `CVE-2025-30361` · CVE record: LabRedesCefetRJ WeGIA · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2025 · Tags: Authentication bypass - [WeGIA Cross-Site Scripting (XSS) Stored in endpoint \`adicionar_tipo_docs_atendido.php\` parameter \`tipo\`](https://agentprime.io/advisories/CVE-2025-29782.md) `CVE-2025-29782` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 14 Mar 2025 · Tags: Cross-site scripting (XSS) - [WeGIA has a stored Cross-Site Scripting (XSS) in 'processa_edicao_socio.php' via the 'socio_nome' parameter](https://agentprime.io/advisories/CVE-2025-27499.md) `CVE-2025-27499` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 3 Mar 2025 · Tags: Cross-site scripting (XSS) - [Denial of Service (DoS) in WeGIA due to Recursive Crawling of Dynamic URLs](https://agentprime.io/advisories/CVE-2025-27419.md) `CVE-2025-27419` · CVE record: LabRedesCefetRJ WeGIA · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Mar 2025 · Tags: Denial of service - [WeGIA contains a Stored Cross-Site Scripting (XSS) in 'atendido_parentesco_adicionar.php' via the 'descricao' parameter](https://agentprime.io/advisories/CVE-2025-27420.md) `CVE-2025-27420` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 3 Mar 2025 · Tags: Cross-site scripting (XSS) - [WeGIA contains a Stored Cross-Site Scripting (XSS) in 'adicionar_tipo_atendido.php' via the 'tipo' parameter](https://agentprime.io/advisories/CVE-2025-27418.md) `CVE-2025-27418` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 3 Mar 2025 · Tags: Cross-site scripting (XSS) - [WeGIA Contains a Stored Cross-Site Scripting (XSS) in 'adicionar_status_atendido.php' via the 'status' parameter](https://agentprime.io/advisories/CVE-2025-27417.md) `CVE-2025-27417` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 3 Mar 2025 · Tags: Cross-site scripting (XSS) - [WeGIA vulnerable to OS Command Injection at endpoint 'importar_dump.php' parameter 'import' (RCE)](https://agentprime.io/advisories/CVE-2025-27140.md) `CVE-2025-27140` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Feb 2025 · Tags: Command injection, Broken access control - [WeGIA has SQL Injection endpoint at 'dao/pet/adicionar_tipo_exame.php' parameter 'tipo_exame'](https://agentprime.io/advisories/CVE-2025-27133.md) `CVE-2025-27133` · CVE record: LabRedesCefetRJ WeGIA · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Feb 2025 · Tags: SQL injection - [SQL Injection endpoint 'html/personalizacao_upload.php' parameter 'id_campo' in WeGIA](https://agentprime.io/advisories/CVE-2025-27096.md) `CVE-2025-27096` · CVE record: LabRedesCefetRJ WeGIA · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Feb 2025 · Tags: SQL injection - [SQL Injection endpoint 'deletar_cargo.php' parameter 'id_cargo' in WeGIA](https://agentprime.io/advisories/CVE-2025-26605.md) `CVE-2025-26605` · CVE record: LabRedesCefetRJ WeGIA · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2025 · Tags: SQL injection - [SQL Injection endpoint 'informacao_adicional.php' parameter 'id_descricao' in WeGIA](https://agentprime.io/advisories/CVE-2025-26606.md) `CVE-2025-26606` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2025 · Tags: SQL injection, Broken access control - [SQL Injection endpoint 'documento_excluir.php' parameter 'id_funcionario' in WeGIA](https://agentprime.io/advisories/CVE-2025-26607.md) `CVE-2025-26607` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2025 · Tags: SQL injection, Broken access control - [SQL Injection endpoint 'dependente_docdependente.php' parameter 'id_dependente', 'id_doc' in WeGIA](https://agentprime.io/advisories/CVE-2025-26608.md) `CVE-2025-26608` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2025 · Tags: SQL injection, Broken access control - [SQL Injection endpoint 'familiar_docfamiliar.php' parameter 'id_dependente', 'id_doc' in WeGIA](https://agentprime.io/advisories/CVE-2025-26609.md) `CVE-2025-26609` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2025 · Tags: SQL injection, Broken access control - [SQL Injection endpoint 'restaurar_produto_desocultar.php' parameter 'id_produto' in WeGIA](https://agentprime.io/advisories/CVE-2025-26610.md) `CVE-2025-26610` · CVE record: LabRedesCefetRJ WeGIA · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2025 · Tags: SQL injection - [SQL Injection endpoint 'remover_produto.php' parameter 'id_produto' in WeGIA](https://agentprime.io/advisories/CVE-2025-26611.md) `CVE-2025-26611` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2025 · Tags: SQL injection, Broken access control - [SQL Injection endpoint 'adicionar_almoxarife.php' parameter 'id_almoxarifado', 'id_funcionario' in WeGIA](https://agentprime.io/advisories/CVE-2025-26612.md) `CVE-2025-26612` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2025 · Tags: SQL injection - [OS Command Injection endpoint 'gerenciar_backup.php' parameter 'file' (RCE) in WeGIA](https://agentprime.io/advisories/CVE-2025-26613.md) `CVE-2025-26613` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2025 · Tags: Command injection, Broken access control - [SQL Injection endpoint 'deletar_documento.php' parameter 'id_cargo' in WeGIA](https://agentprime.io/advisories/CVE-2025-26614.md) `CVE-2025-26614` · CVE record: LabRedesCefetRJ WeGIA · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2025 · Tags: SQL injection - [Path Traversal endpoint 'examples.php' parameter 'src' in WeGIA](https://agentprime.io/advisories/CVE-2025-26615.md) `CVE-2025-26615` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2025 · Tags: Path traversal, Broken access control - [Path Traversal endpoint 'exportar_dump.php' parameter 'file' in WeGIA](https://agentprime.io/advisories/CVE-2025-26616.md) `CVE-2025-26616` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2025 · Tags: Path traversal, Broken access control - [SQL Injection endpoint 'historico_paciente.php' parameter 'id_fichamedica' in WeGIA](https://agentprime.io/advisories/CVE-2025-26617.md) `CVE-2025-26617` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2025 · Tags: SQL injection, Broken access control - [SQL Injection endpoint 'deletar_permissao.php' parameter 'c', 'a', 'r' in WeGIA](https://agentprime.io/advisories/CVE-2025-24901.md) `CVE-2025-24901` · CVE record: LabRedesCefetRJ WeGIA · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Feb 2025 · Tags: SQL injection - [SQL Injection endpoint 'salvar_cargo.php' parameter 'id_cargo' in WeGIA](https://agentprime.io/advisories/CVE-2025-24902.md) `CVE-2025-24902` · CVE record: LabRedesCefetRJ WeGIA · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Feb 2025 · Tags: SQL injection - [SQL Injection endpoint 'get_codigobarras_cobranca.php' parameter 'codigo' in WeGIA](https://agentprime.io/advisories/CVE-2025-24905.md) `CVE-2025-24905` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Feb 2025 · Tags: SQL injection - [SQL Injection endpoint 'get_detalhes_cobranca.php' parameter 'codigo' in WeGIA](https://agentprime.io/advisories/CVE-2025-24906.md) `CVE-2025-24906` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Feb 2025 · Tags: SQL injection - [SQL Injection endpoint 'get_detalhes_socio.php' parameter 'id_socio' in WeGIA](https://agentprime.io/advisories/CVE-2025-24957.md) `CVE-2025-24957` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Feb 2025 · Tags: SQL injection - [SQL Injection endpoint 'salvar_tag.php' parameter 'id_tag' in WeGIA](https://agentprime.io/advisories/CVE-2025-24958.md) `CVE-2025-24958` · CVE record: LabRedesCefetRJ WeGIA · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Feb 2025 · Tags: SQL injection - [WeGIA Open Redirect vulnerability](https://agentprime.io/advisories/CVE-2025-24020.md) `CVE-2025-24020` · CVE record: LabRedesCefetRJ WeGIA · CVSS 4.8 Medium · Not analysed yet · Published 21 Jan 2025 · Tags: Open redirect - [WeGIA has a SQL Injection endpoint 'adicionar_raca.php' parameter 'raca'](https://agentprime.io/advisories/CVE-2025-23220.md) `CVE-2025-23220` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jan 2025 · Tags: SQL injection - [WeGIA has a SQL Injection endpoint 'adicionar_cor.php' parameter 'cor'](https://agentprime.io/advisories/CVE-2025-23219.md) `CVE-2025-23219` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jan 2025 · Tags: SQL injection - [WeGIA has a SQL Injection endpoint 'adicionar_especie.php' parameter 'especie'](https://agentprime.io/advisories/CVE-2025-23218.md) `CVE-2025-23218` · CVE record: LabRedesCefetRJ WeGIA · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jan 2025 · Tags: SQL injection - [Cross-Site Scripting (XSS) Stored endpoint 'remuneracao.php ' parameter 'descricao' in WeGIA](https://agentprime.io/advisories/CVE-2025-23038.md) `CVE-2025-23038` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 13 Jan 2025 · Tags: Cross-site scripting (XSS) - [Cross-Site Scripting (XSS) Reflected endpoint 'cadastro_funcionario.php' parameter 'cpf' in WeGIA](https://agentprime.io/advisories/CVE-2025-23030.md) `CVE-2025-23030` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 13 Jan 2025 · Tags: Cross-site scripting (XSS) - [Cross-Site Scripting (XSS) Stored endpoint 'adicionar_alergia.php' parameter 'nome' in WeGIA](https://agentprime.io/advisories/CVE-2025-23031.md) `CVE-2025-23031` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 13 Jan 2025 · Tags: Cross-site scripting (XSS) - [Cross-Site Scripting (XSS) Stored endpoint 'adicionar_escala.php' parameter 'escala' in WeGIA](https://agentprime.io/advisories/CVE-2025-23032.md) `CVE-2025-23032` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 13 Jan 2025 · Tags: Cross-site scripting (XSS) - [Cross-Site Scripting (XSS) Stored endpoint 'adicionar_situacao.php' parameter 'situacao' in WeGIA](https://agentprime.io/advisories/CVE-2025-23033.md) `CVE-2025-23033` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 13 Jan 2025 · Tags: Cross-site scripting (XSS) - [Cross-Site Scripting (XSS) Reflected endpoint 'tags.php' parameter 'msg_e' in WeGIA](https://agentprime.io/advisories/CVE-2025-23034.md) `CVE-2025-23034` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 13 Jan 2025 · Tags: Cross-site scripting (XSS) - [Cross-Site Scripting (XSS) Stored endpoint 'adicionar_tipo_quadro_horario.php' parameter 'tipo' in WeGIA](https://agentprime.io/advisories/CVE-2025-23035.md) `CVE-2025-23035` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 13 Jan 2025 · Tags: Cross-site scripting (XSS) - [Cross-Site Scripting (XSS) Reflected endpoint 'pre_cadastro_funcionario.php' parameter 'msg_e' in WeGIA](https://agentprime.io/advisories/CVE-2025-23036.md) `CVE-2025-23036` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 13 Jan 2025 · Tags: Cross-site scripting (XSS) - [Cross-Site Scripting (XSS) Stored endpoint 'control.php' parameter 'cargo' in WeGIA](https://agentprime.io/advisories/CVE-2025-23037.md) `CVE-2025-23037` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 13 Jan 2025 · Tags: Cross-site scripting (XSS) - [WeGIA Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao'](https://agentprime.io/advisories/CVE-2025-22613.md) `CVE-2025-22613` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 13 Jan 2025 · Tags: Cross-site scripting (XSS) - [WeGIA Cross-Site Scripting (XSS) Stored endpoint 'dependente_editarInfoPessoal.php ' parameters 'nome' 'SobrenomeForm'](https://agentprime.io/advisories/CVE-2025-22614.md) `CVE-2025-22614` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 13 Jan 2025 · Tags: Cross-site scripting (XSS) - [WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'Cadastro_Atendido.php' parameter 'cpf'](https://agentprime.io/advisories/CVE-2025-22615.md) `CVE-2025-22615` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.4 Medium · Not analysed yet · Published 13 Jan 2025 · Tags: Cross-site scripting (XSS) Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .