CNNVD-202508-1159 Information
CNNVD ID
CNNVD-202508-1159
Related CVE
- CNNVD Published: 2025-08-12
Description (Chinese)
WeGIA是Nilson Lazarin个人开发者的一个福利机构的网络管理器。 WeGIA 3.4.8之前版本存在SQL注入漏洞，该漏洞源于/html/funcionario/dependente_remover.php端点id_dependente参数存在SQL注入，可能导致数据库泄露。
Description (English)
WeGIA is the network manager of a welfare institution of the Nelson Lazarin personal developer. The previous version of WeGIA 3.4.8 had an injection loophole in SQL, which originated in/html/funcionario/dependente remover.php endpointid dependente parameter, which could lead to the release of the database.
Hazard Level
Low
Vulnerability Type
SQL注入
Affected Vendor
个人开发者
Published
2025-08-12
Last Modified
2026-02-24
References
https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-4fqm-ww3v-6mwv https://github.com/LabRedesCefetRJ/WeGIA/commit/cb7f5e2b98ef6087b80659627f368612e3c535f3 https://nvd.nist.gov/vuln/detail/CVE-2025-55167
Patch
https://github.com/LabRedesCefetRJ/WeGIA/releases
Share on: