wegia records
179 published records for vendor wegia.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 23
- With a fix record
- 63.1%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')78
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')61
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')15
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4
- CWE-94 Improper Control of Generation of Code ('Code Injection')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
The weakness classes this vendor ships most often: where to look.
CWEAll records
179 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
41Plan | CVE-2025-27140No exploit | WeGIA vulnerable to OS Command Injection at endpoint 'importar_dump.php' parameter 'import' (RCE)wegia · wegia · CWE-78 | Critical10.0 | — | 2.9% | Feb 24, 2025 |
41Plan | CVE-2025-26613No exploit | OS Command Injection endpoint 'gerenciar_backup.php' parameter 'file' (RCE) in WeGIAwegia · wegia · CWE-78 | Critical10.0 | — | 2.5% | Feb 18, 2025 |
41Plan | CVE-2025-55169Proof of concept | WeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'wegia · wegia · CWE-22 | Critical10.0 | — | 1.7% | Aug 12, 2025 |
40Plan | CVE-2025-50201No exploit | WeGIA OS Command Injection in debug_info.php parameter 'branch'wegia · wegia · CWE-78 | Critical9.8 | — | 4.7% | Jun 19, 2025 |
40Plan | CVE-2026-28411Proof of concept | WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`wegia · wegia · CWE-288 | Critical9.8 | — | 2.6% | Feb 27, 2026 |
40Plan | CVE-2025-26616No exploit | Path Traversal endpoint 'exportar_dump.php' parameter 'file' in WeGIAwegia · wegia · CWE-22 | Critical10.0 | — | 0.6% | Feb 18, 2025 |
40Plan | CVE-2025-30364No exploit | WeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionariowegia · wegia · CWE-89 | Critical10.0 | — | 0.6% | Mar 27, 2025 |
40Plan | CVE-2025-23218No exploit | WeGIA has a SQL Injection endpoint 'adicionar_especie.php' parameter 'especie'wegia · wegia · CWE-89 | Critical10.0 | — | 0.6% | Jan 20, 2025 |
40Plan | CVE-2025-23220No exploit | WeGIA has a SQL Injection endpoint 'adicionar_raca.php' parameter 'raca'wegia · wegia · CWE-89 | Critical10.0 | — | 0.6% | Jan 20, 2025 |
40Plan | CVE-2025-23219No exploit | WeGIA has a SQL Injection endpoint 'adicionar_cor.php' parameter 'cor'wegia · wegia · CWE-89 | Critical10.0 | — | 0.6% | Jan 20, 2025 |
40Plan | CVE-2025-26607No exploit | SQL Injection endpoint 'documento_excluir.php' parameter 'id_funcionario' in WeGIAwegia · wegia · CWE-89 | Critical10.0 | — | 0.5% | Feb 18, 2025 |
40Plan | CVE-2025-26608No exploit | SQL Injection endpoint 'dependente_docdependente.php' parameter 'id_dependente', 'id_doc' in WeGIAwegia · wegia · CWE-89 | Critical10.0 | — | 0.5% | Feb 18, 2025 |
40Plan | CVE-2025-26617No exploit | SQL Injection endpoint 'historico_paciente.php' parameter 'id_fichamedica' in WeGIAwegia · wegia · CWE-89 | Critical10.0 | — | 0.5% | Feb 18, 2025 |
40Plan | CVE-2025-26606No exploit | SQL Injection endpoint 'informacao_adicional.php' parameter 'id_descricao' in WeGIAwegia · wegia · CWE-89 | Critical10.0 | — | 0.5% | Feb 18, 2025 |
40Plan | CVE-2025-26609No exploit | SQL Injection endpoint 'familiar_docfamiliar.php' parameter 'id_dependente', 'id_doc' in WeGIAwegia · wegia · CWE-89 | Critical10.0 | — | 0.5% | Feb 18, 2025 |
40Plan | CVE-2025-24957No exploit | SQL Injection endpoint 'get_detalhes_socio.php' parameter 'id_socio' in WeGIAwegia · wegia · CWE-89 | Critical10.0 | — | 0.5% | Feb 3, 2025 |
40Plan | CVE-2025-46828No exploit | Unauthenticated SQL Injection on get_socios.php endpointwegia · wegia · CWE-89 | Critical10.0 | — | 0.5% | May 7, 2025 |
40Plan | CVE-2025-26611No exploit | SQL Injection endpoint 'remover_produto.php' parameter 'id_produto' in WeGIAwegia · wegia · CWE-89 | Critical10.0 | — | 0.5% | Feb 18, 2025 |
40Plan | CVE-2025-26612No exploit | SQL Injection endpoint 'adicionar_almoxarife.php' parameter 'id_almoxarifado', 'id_funcionario' in WeGIAwegia · wegia · CWE-89 | Critical10.0 | — | 0.5% | Feb 18, 2025 |
40Plan | CVE-2025-24906No exploit | SQL Injection endpoint 'get_detalhes_cobranca.php' parameter 'codigo' in WeGIAwegia · wegia · CWE-89 | Critical10.0 | — | 0.5% | Feb 3, 2025 |
40Plan | CVE-2025-53823No exploit | WeGIA vulnerable to SQL Injection (Blind Time-Based) in `processa_deletar_socio.php` parameter `id_socio`wegia · wegia · CWE-89 | Critical10.0 | — | 0.5% | Jul 14, 2025 |
40Plan | CVE-2025-53091No exploit | WeGIA has Unauthenticated Time-Based Blind SQL Injection in almox Parameterwegia · wegia · CWE-89 | Critical10.0 | — | 0.5% | Jun 27, 2025 |
40Plan | CVE-2025-30367No exploit | WeGIA SQL Injection Vulnerability in nextPage Parameter on control.php Endpointwegia · wegia · CWE-89 | Critical10.0 | — | 0.5% | Mar 27, 2025 |
40Plan | CVE-2025-24905No exploit | SQL Injection endpoint 'get_codigobarras_cobranca.php' parameter 'codigo' in WeGIAwegia · wegia · CWE-89 | Critical10.0 | — | 0.5% | Feb 3, 2025 |
39Monitor | CVE-2025-22133No exploit | WeGIA Allows Arbitrary File Upload with Remote Code Execution (RCE)wegia · wegia · CWE-94 | Critical9.9 | — | 0.7% | Jan 7, 2025 |
- CVE-2025-2714041Plan
WeGIA vulnerable to OS Command Injection at endpoint 'importar_dump.php' parameter 'import' (RCE)
CriticalCVSS 10.0No exploitEPSS 2%wegia · wegiaFeb 24, 2025
- CVE-2025-2661341Plan
OS Command Injection endpoint 'gerenciar_backup.php' parameter 'file' (RCE) in WeGIA
CriticalCVSS 10.0No exploitEPSS 2%wegia · wegiaFeb 18, 2025
- CVE-2025-5516941Plan
WeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'
CriticalCVSS 10.0Proof of conceptEPSS 1%wegia · wegiaAug 12, 2025
- CVE-2025-5020140Plan
WeGIA OS Command Injection in debug_info.php parameter 'branch'
CriticalCVSS 9.8No exploitEPSS 4%wegia · wegiaJun 19, 2025
- CVE-2026-2841140Plan
WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`
CriticalCVSS 9.8Proof of conceptEPSS 2%wegia · wegiaFeb 27, 2026
- CVE-2025-2661640Plan
Path Traversal endpoint 'exportar_dump.php' parameter 'file' in WeGIA
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaFeb 18, 2025
- CVE-2025-3036440Plan
WeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionario
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaMar 27, 2025
- CVE-2025-2321840Plan
WeGIA has a SQL Injection endpoint 'adicionar_especie.php' parameter 'especie'
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaJan 20, 2025
- CVE-2025-2322040Plan
WeGIA has a SQL Injection endpoint 'adicionar_raca.php' parameter 'raca'
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaJan 20, 2025
- CVE-2025-2321940Plan
WeGIA has a SQL Injection endpoint 'adicionar_cor.php' parameter 'cor'
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaJan 20, 2025
- CVE-2025-2660740Plan
SQL Injection endpoint 'documento_excluir.php' parameter 'id_funcionario' in WeGIA
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaFeb 18, 2025
- CVE-2025-2660840Plan
SQL Injection endpoint 'dependente_docdependente.php' parameter 'id_dependente', 'id_doc' in WeGIA
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaFeb 18, 2025
- CVE-2025-2661740Plan
SQL Injection endpoint 'historico_paciente.php' parameter 'id_fichamedica' in WeGIA
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaFeb 18, 2025
- CVE-2025-2660640Plan
SQL Injection endpoint 'informacao_adicional.php' parameter 'id_descricao' in WeGIA
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaFeb 18, 2025
- CVE-2025-2660940Plan
SQL Injection endpoint 'familiar_docfamiliar.php' parameter 'id_dependente', 'id_doc' in WeGIA
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaFeb 18, 2025
- CVE-2025-2495740Plan
SQL Injection endpoint 'get_detalhes_socio.php' parameter 'id_socio' in WeGIA
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaFeb 3, 2025
- CVE-2025-4682840Plan
Unauthenticated SQL Injection on get_socios.php endpoint
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaMay 7, 2025
- CVE-2025-2661140Plan
SQL Injection endpoint 'remover_produto.php' parameter 'id_produto' in WeGIA
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaFeb 18, 2025
- CVE-2025-2661240Plan
SQL Injection endpoint 'adicionar_almoxarife.php' parameter 'id_almoxarifado', 'id_funcionario' in WeGIA
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaFeb 18, 2025
- CVE-2025-2490640Plan
SQL Injection endpoint 'get_detalhes_cobranca.php' parameter 'codigo' in WeGIA
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaFeb 3, 2025
- CVE-2025-5382340Plan
WeGIA vulnerable to SQL Injection (Blind Time-Based) in `processa_deletar_socio.php` parameter `id_socio`
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaJul 14, 2025
- CVE-2025-5309140Plan
WeGIA has Unauthenticated Time-Based Blind SQL Injection in almox Parameter
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaJun 27, 2025
- CVE-2025-3036740Plan
WeGIA SQL Injection Vulnerability in nextPage Parameter on control.php Endpoint
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaMar 27, 2025
- CVE-2025-2490540Plan
SQL Injection endpoint 'get_codigobarras_cobranca.php' parameter 'codigo' in WeGIA
CriticalCVSS 10.0No exploitEPSS 0%wegia · wegiaFeb 3, 2025
- CVE-2025-2213339Monitor
WeGIA Allows Arbitrary File Upload with Remote Code Execution (RCE)
CriticalCVSS 9.9No exploitEPSS 0%wegia · wegiaJan 7, 2025