CNNVD-202507-2253 Information
Jul 16, 2025
cve
CNNVD ID
CNNVD-202507-2253
Related CVE
- CNNVD Published: 2025-07-16
Description (Chinese)
WeGIA是Nilson Lazarin个人开发者的一个福利机构的网络管理器。 WeGIA 3.4.5之前版本存在SQL注入漏洞，该漏洞源于文件/controle/control.php中参数cargo未正确过滤，可能导致SQL注入攻击。
Description (English)
WeGIA is the network manager of a welfare institution of the Nelson Lazarin personal developer. The previous version of WeGIA 3.4.5 had an SQL injection loophole, which stemmed from the incorrect filtering of the parameter cargo in the document/control/control.php, which could lead to an SQL injection attack.
Hazard Level
High
Vulnerability Type
SQL注入
Affected Vendor
Live Support
Published
2025-07-16
Last Modified
2026-02-24
References
https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-j3qv-v3m7-73pj
Patch
https://github.com/LabRedesCefetRJ/WeGIA/releases
Share on: