Advisories · Technology
LabRedesCefetRJ WeGIA.
Every CVE that names LabRedesCefetRJ WeGIA among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
LabRedesCefetRJ WeGIA Cadastro de Funcionário cadastro_funcionario.php cross site scripting
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoSaida.php cross site scripting
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoEntrada.php cross site scripting
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
LabRedesCefetRJ WeGIA Cadastro de Atendio Cadastro_Atendido.php cross site scripting
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
LabRedesCefetRJ WeGIA Additional Categoria adicionar_categoria.php cross site scripting
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
LabRedesCefetRJ WeGIA Adicionar Unidade adicionar_unidade.php cross site scripting
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- Code injection
- CVSS 8.3 High
WeGIA SQL Injection Vulnerability in id Parameter on control.php Endpoint
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
WeGIA OS Command Injection in debug_info.php parameter 'branch'
- LabRedesCefetRJ WeGIA
- Command injection
- CVSS 10.0 CriticalCritical · CVSS 9+
Unauthenticated SQL Injection on get_socios.php endpoint
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 10.0 CriticalCritical · CVSS 9+
WeGIA SQL Injection Vulnerability in nextPage Parameter on control.php Endpoint
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 6.2 Medium
WeGIA vulnerable to Stored XSS in personalizacao.php
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 9.4 CriticalCritical · CVSS 9+
SQL Injection in query_geracao_auto.php
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 10.0 CriticalCritical · CVSS 9+
WeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionario
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 6.4 Medium
WeGIA vulnerable to Stored XSS in documentos_funcionario.php parameter dados_addInfo
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WeGIA vulnerable to Stored XSS in documentos_funcionario.php parameter id
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
WeGIA Vulnerable to Broken Authentication - Old Password Validation
- LabRedesCefetRJ WeGIA
- Authentication bypass
- CVSS 6.4 Medium
WeGIA Cross-Site Scripting (XSS) Stored in endpoint `adicionar_tipo_docs_atendido.php` parameter `tipo`
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WeGIA has a stored Cross-Site Scripting (XSS) in 'processa_edicao_socio.php' via the 'socio_nome' parameter
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 9.2 CriticalCritical · CVSS 9+
Denial of Service (DoS) in WeGIA due to Recursive Crawling of Dynamic URLs
- LabRedesCefetRJ WeGIA
- Denial of service
- CVSS 6.4 Medium
WeGIA contains a Stored Cross-Site Scripting (XSS) in 'atendido_parentesco_adicionar.php' via the 'descricao' parameter
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WeGIA contains a Stored Cross-Site Scripting (XSS) in 'adicionar_tipo_atendido.php' via the 'tipo' parameter
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WeGIA Contains a Stored Cross-Site Scripting (XSS) in 'adicionar_status_atendido.php' via the 'status' parameter
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 10.0 CriticalCritical · CVSS 9+
WeGIA vulnerable to OS Command Injection at endpoint 'importar_dump.php' parameter 'import' (RCE)
- LabRedesCefetRJ WeGIA
- Command injection
- Broken access control
- CVSS 9.4 CriticalCritical · CVSS 9+
WeGIA has SQL Injection endpoint at 'dao/pet/adicionar_tipo_exame.php' parameter 'tipo_exame'
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 9.4 CriticalCritical · CVSS 9+
SQL Injection endpoint 'html/personalizacao_upload.php' parameter 'id_campo' in WeGIA
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 9.4 CriticalCritical · CVSS 9+
SQL Injection endpoint 'deletar_cargo.php' parameter 'id_cargo' in WeGIA
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 10.0 CriticalCritical · CVSS 9+
SQL Injection endpoint 'informacao_adicional.php' parameter 'id_descricao' in WeGIA
- LabRedesCefetRJ WeGIA
- SQL injection
- Broken access control
- CVSS 10.0 CriticalCritical · CVSS 9+
SQL Injection endpoint 'documento_excluir.php' parameter 'id_funcionario' in WeGIA
- LabRedesCefetRJ WeGIA
- SQL injection
- Broken access control
- CVSS 10.0 CriticalCritical · CVSS 9+
SQL Injection endpoint 'dependente_docdependente.php' parameter 'id_dependente', 'id_doc' in WeGIA
- LabRedesCefetRJ WeGIA
- SQL injection
- Broken access control
- CVSS 10.0 CriticalCritical · CVSS 9+
SQL Injection endpoint 'familiar_docfamiliar.php' parameter 'id_dependente', 'id_doc' in WeGIA
- LabRedesCefetRJ WeGIA
- SQL injection
- Broken access control
- CVSS 9.4 CriticalCritical · CVSS 9+
SQL Injection endpoint 'restaurar_produto_desocultar.php' parameter 'id_produto' in WeGIA
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 10.0 CriticalCritical · CVSS 9+
SQL Injection endpoint 'remover_produto.php' parameter 'id_produto' in WeGIA
- LabRedesCefetRJ WeGIA
- SQL injection
- Broken access control
- CVSS 10.0 CriticalCritical · CVSS 9+
SQL Injection endpoint 'adicionar_almoxarife.php' parameter 'id_almoxarifado', 'id_funcionario' in WeGIA
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 10.0 CriticalCritical · CVSS 9+
OS Command Injection endpoint 'gerenciar_backup.php' parameter 'file' (RCE) in WeGIA
- LabRedesCefetRJ WeGIA
- Command injection
- Broken access control
- CVSS 9.4 CriticalCritical · CVSS 9+
SQL Injection endpoint 'deletar_documento.php' parameter 'id_cargo' in WeGIA
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 10.0 CriticalCritical · CVSS 9+
Path Traversal endpoint 'examples.php' parameter 'src' in WeGIA
- LabRedesCefetRJ WeGIA
- Path traversal
- Broken access control
- CVSS 10.0 CriticalCritical · CVSS 9+
Path Traversal endpoint 'exportar_dump.php' parameter 'file' in WeGIA
- LabRedesCefetRJ WeGIA
- Path traversal
- Broken access control
- CVSS 10.0 CriticalCritical · CVSS 9+
SQL Injection endpoint 'historico_paciente.php' parameter 'id_fichamedica' in WeGIA
- LabRedesCefetRJ WeGIA
- SQL injection
- Broken access control
- CVSS 9.4 CriticalCritical · CVSS 9+
SQL Injection endpoint 'deletar_permissao.php' parameter 'c', 'a', 'r' in WeGIA
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 9.4 CriticalCritical · CVSS 9+
SQL Injection endpoint 'salvar_cargo.php' parameter 'id_cargo' in WeGIA
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 10.0 CriticalCritical · CVSS 9+
SQL Injection endpoint 'get_codigobarras_cobranca.php' parameter 'codigo' in WeGIA
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 10.0 CriticalCritical · CVSS 9+
SQL Injection endpoint 'get_detalhes_cobranca.php' parameter 'codigo' in WeGIA
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 10.0 CriticalCritical · CVSS 9+
SQL Injection endpoint 'get_detalhes_socio.php' parameter 'id_socio' in WeGIA
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 9.4 CriticalCritical · CVSS 9+
SQL Injection endpoint 'salvar_tag.php' parameter 'id_tag' in WeGIA
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 4.8 Medium
WeGIA Open Redirect vulnerability
- LabRedesCefetRJ WeGIA
- Open redirect
- CVSS 10.0 CriticalCritical · CVSS 9+
WeGIA has a SQL Injection endpoint 'adicionar_raca.php' parameter 'raca'
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 10.0 CriticalCritical · CVSS 9+
WeGIA has a SQL Injection endpoint 'adicionar_cor.php' parameter 'cor'
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 10.0 CriticalCritical · CVSS 9+
WeGIA has a SQL Injection endpoint 'adicionar_especie.php' parameter 'especie'
- LabRedesCefetRJ WeGIA
- SQL injection
- CVSS 6.4 Medium
Cross-Site Scripting (XSS) Stored endpoint 'remuneracao.php ' parameter 'descricao' in WeGIA
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Cross-Site Scripting (XSS) Reflected endpoint 'cadastro_funcionario.php' parameter 'cpf' in WeGIA
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Cross-Site Scripting (XSS) Stored endpoint 'adicionar_alergia.php' parameter 'nome' in WeGIA
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Cross-Site Scripting (XSS) Stored endpoint 'adicionar_escala.php' parameter 'escala' in WeGIA
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Cross-Site Scripting (XSS) Stored endpoint 'adicionar_situacao.php' parameter 'situacao' in WeGIA
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Cross-Site Scripting (XSS) Reflected endpoint 'tags.php' parameter 'msg_e' in WeGIA
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Cross-Site Scripting (XSS) Stored endpoint 'adicionar_tipo_quadro_horario.php' parameter 'tipo' in WeGIA
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Cross-Site Scripting (XSS) Reflected endpoint 'pre_cadastro_funcionario.php' parameter 'msg_e' in WeGIA
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Cross-Site Scripting (XSS) Stored endpoint 'control.php' parameter 'cargo' in WeGIA
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WeGIA Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao'
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WeGIA Cross-Site Scripting (XSS) Stored endpoint 'dependente_editarInfoPessoal.php ' parameters 'nome' 'SobrenomeForm'
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'Cadastro_Atendido.php' parameter 'cpf'
- LabRedesCefetRJ WeGIA
- Cross-site scripting (XSS)