CNNVD-202509-1036 Information

CNNVD ID

CNNVD-202509-1036

CVE-2025-58454

  • CNNVD Published: 2025-09-08

Description (Chinese)

WeGIA是Nilson Lazarin个人开发者的一个福利机构的网络管理器。 WeGIA 3.4.11之前版本存在SQL注入漏洞,该漏洞源于listar_despachos.php端点存在SQL注入。

Description (English)

WeGIA is the network manager of a welfare institution of the Nelson Lazarin personal developer. The previous version of Wegia 3.4.11 had an SQL injection loophole, which originated from the SQL injection at the listar despachos.php endpoint.

Hazard Level

High

Vulnerability Type

SQL注入

Affected Vendor

个人开发者

Published

2025-09-08

Last Modified

2026-02-24

References

https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-ghfh-g6rg-jmqf https://access.redhat.com/security/cve/cve-2025-58454

Patch

https://github.com/LabRedesCefetRJ/WeGIA/releases

Share on: