agentprime: labredescefetrj-wegia

agentprime: labredescefetrj-wegiaEvery new CVE for labredescefetrj-wegia.https://agentprime.io/CVE-2026-61719: WeGIA: Stored Cross-Site Scripting (XSS) in "historico_prontuarios.php" via "textoProntuario" Fieldhttps://agentprime.io/advisories/CVE-2026-61719/https://agentprime.io/advisories/CVE-2026-61719/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 21:26:27 GMTCVECVE-2026-61673: WeGIA: Stored DOM XSS in listar_despachos.php Allows Account Takeoverhttps://agentprime.io/advisories/CVE-2026-61673/https://agentprime.io/advisories/CVE-2026-61673/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 21:22:22 GMTCVECVE-2026-61671: WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle Classeshttps://agentprime.io/advisories/CVE-2026-61671/https://agentprime.io/advisories/CVE-2026-61671/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 21:21:02 GMTCVECVE-2026-55684: WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.phphttps://agentprime.io/advisories/CVE-2026-55684/https://agentprime.io/advisories/CVE-2026-55684/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 19:46:49 GMTCVEcriticalCVE-2026-55682: WeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.phphttps://agentprime.io/advisories/CVE-2026-55682/https://agentprime.io/advisories/CVE-2026-55682/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 19:46:00 GMTCVECVE-2026-55681: WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameterhttps://agentprime.io/advisories/CVE-2026-55681/https://agentprime.io/advisories/CVE-2026-55681/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 19:44:57 GMTCVECVE-2026-55679: WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injectionhttps://agentprime.io/advisories/CVE-2026-55679/https://agentprime.io/advisories/CVE-2026-55679/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 19:44:02 GMTCVECVE-2026-55680: WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameterhttps://agentprime.io/advisories/CVE-2026-55680/https://agentprime.io/advisories/CVE-2026-55680/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 19:42:22 GMTCVEcriticalCVE-2026-55683: WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.phphttps://agentprime.io/advisories/CVE-2026-55683/https://agentprime.io/advisories/CVE-2026-55683/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 19:41:34 GMTCVEcriticalCVE-2026-54767: WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.phphttps://agentprime.io/advisories/CVE-2026-54767/https://agentprime.io/advisories/CVE-2026-54767/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 21:56:28 GMTCVEcriticalCVE-2026-54671: WeGIA: Authorization Bypass via Empty Resource Array in InternoControlehttps://agentprime.io/advisories/CVE-2026-54671/https://agentprime.io/advisories/CVE-2026-54671/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 21:55:39 GMTCVECVE-2026-54670: WeGIA: Unauthenticated Auth Bypass + Local File Inclusionhttps://agentprime.io/advisories/CVE-2026-54670/https://agentprime.io/advisories/CVE-2026-54670/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 21:54:43 GMTCVEcriticalCVE-2026-76634: WeGIA < 3.9.2 Insecure Direct Object Reference via profile_funcionario.phphttps://agentprime.io/advisories/CVE-2026-76634/https://agentprime.io/advisories/CVE-2026-76634/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 13:48:20 GMTCVECVE-2026-76633: WeGIA < 3.9.2 Authorization Bypass Password Change via alterarSenhahttps://agentprime.io/advisories/CVE-2026-76633/https://agentprime.io/advisories/CVE-2026-76633/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 13:46:24 GMTCVECVE-2026-45335: WeGIA: Middleware whitelist bypass → open redirect via InternoControle.nextPagehttps://agentprime.io/advisories/CVE-2026-45335/https://agentprime.io/advisories/CVE-2026-45335/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 May 2026 15:25:57 GMTCVECVE-2026-45027: WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.phphttps://agentprime.io/advisories/CVE-2026-45027/https://agentprime.io/advisories/CVE-2026-45027/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 May 2026 15:24:21 GMTCVECVE-2026-45026: WeGIA: Stored XSS in html/atendido/processo_aceitacao.phphttps://agentprime.io/advisories/CVE-2026-45026/https://agentprime.io/advisories/CVE-2026-45026/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 18:36:45 GMTCVECVE-2026-45025: WeGIA: Stored XSS in html/atendido/etapa_processo.phphttps://agentprime.io/advisories/CVE-2026-45025/https://agentprime.io/advisories/CVE-2026-45025/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 18:35:28 GMTCVECVE-2026-42873: WeGIA: Error Handling Upload DocDependentehttps://agentprime.io/advisories/CVE-2026-42873/https://agentprime.io/advisories/CVE-2026-42873/CVSS 0.0 (None). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 18:34:05 GMTCVECVE-2026-42872: WeGIA: Reflected XSS in listar_arquivos_etapa.phphttps://agentprime.io/advisories/CVE-2026-42872/https://agentprime.io/advisories/CVE-2026-42872/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 18:32:45 GMTCVECVE-2026-42870: WeGIA: Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao'https://agentprime.io/advisories/CVE-2026-42870/https://agentprime.io/advisories/CVE-2026-42870/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 18:32:03 GMTCVECVE-2026-42871: WeGIA: Error Handling familiar_docfamiliarhttps://agentprime.io/advisories/CVE-2026-42871/https://agentprime.io/advisories/CVE-2026-42871/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 18:31:37 GMTCVECVE-2026-40286: WeGIA has Cross-Site Scripting in Controle de Contribuiçãohttps://agentprime.io/advisories/CVE-2026-40286/https://agentprime.io/advisories/CVE-2026-40286/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 20:27:59 GMTCVECVE-2026-40285: WeGIA has SQL Injection via Session Variable Override in DespachoControle.phphttps://agentprime.io/advisories/CVE-2026-40285/https://agentprime.io/advisories/CVE-2026-40285/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 20:25:33 GMTCVECVE-2026-40284: WeGIA has stored XSS in listar_despachos.phphttps://agentprime.io/advisories/CVE-2026-40284/https://agentprime.io/advisories/CVE-2026-40284/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 20:24:10 GMTCVECVE-2026-40282: WeGIA has stored XSS in intercorrencia_visualizar.phphttps://agentprime.io/advisories/CVE-2026-40282/https://agentprime.io/advisories/CVE-2026-40282/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 20:16:46 GMTCVECVE-2026-40283: WeGIA has stored XSS in profile_paciente.phphttps://agentprime.io/advisories/CVE-2026-40283/https://agentprime.io/advisories/CVE-2026-40283/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 20:03:14 GMTCVECVE-2026-35475: WeGIA - Open Redirect - backup redirection — Unvalidated $_GET['redirect']https://agentprime.io/advisories/CVE-2026-35475/https://agentprime.io/advisories/CVE-2026-35475/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 21:17:04 GMTCVECVE-2026-35474: WeGIA - Open Redirect - atualizacao redirection - Unvalidated $_GET['redirect']https://agentprime.io/advisories/CVE-2026-35474/https://agentprime.io/advisories/CVE-2026-35474/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 21:13:25 GMTCVECVE-2026-35473: WeGIA - Open Redirect - IentradaControle - listarId() - Unvalidated $_GET['nextPage']https://agentprime.io/advisories/CVE-2026-35473/https://agentprime.io/advisories/CVE-2026-35473/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 21:12:35 GMTCVECVE-2026-35399: WeGIA has Stored XSS in backup file nameshttps://agentprime.io/advisories/CVE-2026-35399/https://agentprime.io/advisories/CVE-2026-35399/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 21:06:33 GMTCVECVE-2026-35472: WeGIA - Open Redirect - EstoqueControle - listarTodos() - Unvalidated $_GET['nextPage']https://agentprime.io/advisories/CVE-2026-35472/https://agentprime.io/advisories/CVE-2026-35472/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 21:05:26 GMTCVECVE-2026-35398: WeGIA - Open Redirect - OrigemControle - listarTodos() & listarId_Nome() - Unvalidated $_GET['nextPage']https://agentprime.io/advisories/CVE-2026-35398/https://agentprime.io/advisories/CVE-2026-35398/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 21:04:20 GMTCVECVE-2026-35396: WeGIA - Open Redirect - IsaidaControle - listarId() - Unvalidated $_GET['nextPage']https://agentprime.io/advisories/CVE-2026-35396/https://agentprime.io/advisories/CVE-2026-35396/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 21:02:37 GMTCVECVE-2026-35395: WeGIA has a SQL Injection in DespachoDAO.php via id_memorando parameterhttps://agentprime.io/advisories/CVE-2026-35395/https://agentprime.io/advisories/CVE-2026-35395/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 21:01:28 GMTCVECVE-2026-33991: WeGIA has SQL Injection in deletar_tag.phphttps://agentprime.io/advisories/CVE-2026-33991/https://agentprime.io/advisories/CVE-2026-33991/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Mar 2026 22:10:51 GMTCVECVE-2026-33136: WeGIA has Reflected Cross-Site Scripting (XSS) in `listar_memorandos_ativos.php` via `sccd` parameterhttps://agentprime.io/advisories/CVE-2026-33136/https://agentprime.io/advisories/CVE-2026-33136/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Mar 2026 10:41:05 GMTCVEcriticalCVE-2026-33135: WeGIA has Reflected Cross-Site Scripting (XSS) in `novo_memorandoo.php` via `sccs` parameterhttps://agentprime.io/advisories/CVE-2026-33135/https://agentprime.io/advisories/CVE-2026-33135/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Mar 2026 10:38:44 GMTCVEcriticalCVE-2026-33134: WeGIA has Authenticated Time-Based Blind SQL Injection in `restaurar_produto.php` via `id_produto` parameterhttps://agentprime.io/advisories/CVE-2026-33134/https://agentprime.io/advisories/CVE-2026-33134/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Mar 2026 10:35:43 GMTCVEcriticalCVE-2026-33133: WeGIA has an arbitrary SQL execution vulnerability via crafted backup archivehttps://agentprime.io/advisories/CVE-2026-33133/https://agentprime.io/advisories/CVE-2026-33133/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Mar 2026 10:31:38 GMTCVECVE-2026-31896: WeGIA has a Time-Based Blind SQL Injection in remover_produto_ocultar.phphttps://agentprime.io/advisories/CVE-2026-31896/https://agentprime.io/advisories/CVE-2026-31896/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 19:10:32 GMTCVEcriticalCVE-2026-31895: WeGIA has a SQL Injection via Direct Query Interpolation in restaurar_produto.phphttps://agentprime.io/advisories/CVE-2026-31895/https://agentprime.io/advisories/CVE-2026-31895/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 19:08:18 GMTCVECVE-2026-31894: WeGIA affected by arbitrary file read via symlink in backup restorehttps://agentprime.io/advisories/CVE-2026-31894/https://agentprime.io/advisories/CVE-2026-31894/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 19:05:51 GMTCVECVE-2026-28411: WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`https://agentprime.io/advisories/CVE-2026-28411/https://agentprime.io/advisories/CVE-2026-28411/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Feb 2026 21:52:05 GMTCVEcriticalCVE-2026-28409: WeGIA Vulnerable to Remote Code Execution (RCE) via OS Command Injectionhttps://agentprime.io/advisories/CVE-2026-28409/https://agentprime.io/advisories/CVE-2026-28409/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Feb 2026 21:50:21 GMTCVEcriticalCVE-2026-28408: WeGIA lacks authentication verification in adicionar_tipo_docs_atendido.phphttps://agentprime.io/advisories/CVE-2026-28408/https://agentprime.io/advisories/CVE-2026-28408/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Feb 2026 21:49:14 GMTCVEcriticalCVE-2026-23731: WeGIA Clickjacking Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-23731/https://agentprime.io/advisories/CVE-2026-23731/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Jan 2026 19:50:16 GMTCVECVE-2026-23730: WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=ProdutoControle)https://agentprime.io/advisories/CVE-2026-23730/https://agentprime.io/advisories/CVE-2026-23730/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Jan 2026 19:48:23 GMTCVECVE-2026-23729: WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle)https://agentprime.io/advisories/CVE-2026-23729/https://agentprime.io/advisories/CVE-2026-23729/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Jan 2026 19:47:10 GMTCVECVE-2026-23728: WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle)https://agentprime.io/advisories/CVE-2026-23728/https://agentprime.io/advisories/CVE-2026-23728/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Jan 2026 19:46:07 GMTCVE