wegia kayıtları
wegia üreticisine ait 179 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 23
- Düzeltme kaydı olan
- %63,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')78
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')61
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')15
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4
- CWE-94 Improper Control of Generation of Code ('Code Injection')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
179 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2025-27140İstismar yok | WeGIA vulnerable to OS Command Injection at endpoint 'importar_dump.php' parameter 'import' (RCE)wegia · wegia · CWE-78 | Kritik10,0 | — | %2,9 | 24 Şub 2025 |
41Planlayın | CVE-2025-26613İstismar yok | OS Command Injection endpoint 'gerenciar_backup.php' parameter 'file' (RCE) in WeGIAwegia · wegia · CWE-78 | Kritik10,0 | — | %2,5 | 18 Şub 2025 |
40Planlayın | CVE-2025-50201İstismar yok | WeGIA OS Command Injection in debug_info.php parameter 'branch'wegia · wegia · CWE-78 | Kritik9,8 | — | %4,7 | 19 Haz 2025 |
40Planlayın | CVE-2026-28411Kavram kanıtı | WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`wegia · wegia · CWE-288 | Kritik9,8 | — | %2,9 | 27 Şub 2026 |
40Planlayın | CVE-2025-55169Kavram kanıtı | WeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'wegia · wegia · CWE-22 | Kritik10,0 | — | %1,6 | 12 Ağu 2025 |
40Planlayın | CVE-2025-26616İstismar yok | Path Traversal endpoint 'exportar_dump.php' parameter 'file' in WeGIAwegia · wegia · CWE-22 | Kritik10,0 | — | %0,7 | 18 Şub 2025 |
40Planlayın | CVE-2025-30364İstismar yok | WeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionariowegia · wegia · CWE-89 | Kritik10,0 | — | %0,7 | 27 Mar 2025 |
40Planlayın | CVE-2025-23219İstismar yok | WeGIA has a SQL Injection endpoint 'adicionar_cor.php' parameter 'cor'wegia · wegia · CWE-89 | Kritik10,0 | — | %0,6 | 20 Oca 2025 |
40Planlayın | CVE-2025-23220İstismar yok | WeGIA has a SQL Injection endpoint 'adicionar_raca.php' parameter 'raca'wegia · wegia · CWE-89 | Kritik10,0 | — | %0,6 | 20 Oca 2025 |
40Planlayın | CVE-2025-23218İstismar yok | WeGIA has a SQL Injection endpoint 'adicionar_especie.php' parameter 'especie'wegia · wegia · CWE-89 | Kritik10,0 | — | %0,6 | 20 Oca 2025 |
40Planlayın | CVE-2025-26606İstismar yok | SQL Injection endpoint 'informacao_adicional.php' parameter 'id_descricao' in WeGIAwegia · wegia · CWE-89 | Kritik10,0 | — | %0,6 | 18 Şub 2025 |
40Planlayın | CVE-2025-26608İstismar yok | SQL Injection endpoint 'dependente_docdependente.php' parameter 'id_dependente', 'id_doc' in WeGIAwegia · wegia · CWE-89 | Kritik10,0 | — | %0,6 | 18 Şub 2025 |
40Planlayın | CVE-2025-26617İstismar yok | SQL Injection endpoint 'historico_paciente.php' parameter 'id_fichamedica' in WeGIAwegia · wegia · CWE-89 | Kritik10,0 | — | %0,6 | 18 Şub 2025 |
40Planlayın | CVE-2025-26607İstismar yok | SQL Injection endpoint 'documento_excluir.php' parameter 'id_funcionario' in WeGIAwegia · wegia · CWE-89 | Kritik10,0 | — | %0,6 | 18 Şub 2025 |
40Planlayın | CVE-2025-26609İstismar yok | SQL Injection endpoint 'familiar_docfamiliar.php' parameter 'id_dependente', 'id_doc' in WeGIAwegia · wegia · CWE-89 | Kritik10,0 | — | %0,6 | 18 Şub 2025 |
40Planlayın | CVE-2025-24957İstismar yok | SQL Injection endpoint 'get_detalhes_socio.php' parameter 'id_socio' in WeGIAwegia · wegia · CWE-89 | Kritik10,0 | — | %0,6 | 3 Şub 2025 |
40Planlayın | CVE-2025-26611İstismar yok | SQL Injection endpoint 'remover_produto.php' parameter 'id_produto' in WeGIAwegia · wegia · CWE-89 | Kritik10,0 | — | %0,6 | 18 Şub 2025 |
40Planlayın | CVE-2025-26612İstismar yok | SQL Injection endpoint 'adicionar_almoxarife.php' parameter 'id_almoxarifado', 'id_funcionario' in WeGIAwegia · wegia · CWE-89 | Kritik10,0 | — | %0,6 | 18 Şub 2025 |
40Planlayın | CVE-2025-24906İstismar yok | SQL Injection endpoint 'get_detalhes_cobranca.php' parameter 'codigo' in WeGIAwegia · wegia · CWE-89 | Kritik10,0 | — | %0,6 | 3 Şub 2025 |
40Planlayın | CVE-2025-46828İstismar yok | Unauthenticated SQL Injection on get_socios.php endpointwegia · wegia · CWE-89 | Kritik10,0 | — | %0,5 | 7 May 2025 |
40Planlayın | CVE-2025-53091İstismar yok | WeGIA has Unauthenticated Time-Based Blind SQL Injection in almox Parameterwegia · wegia · CWE-89 | Kritik10,0 | — | %0,5 | 27 Haz 2025 |
40Planlayın | CVE-2025-30367İstismar yok | WeGIA SQL Injection Vulnerability in nextPage Parameter on control.php Endpointwegia · wegia · CWE-89 | Kritik10,0 | — | %0,5 | 27 Mar 2025 |
40Planlayın | CVE-2025-24905İstismar yok | SQL Injection endpoint 'get_codigobarras_cobranca.php' parameter 'codigo' in WeGIAwegia · wegia · CWE-89 | Kritik10,0 | — | %0,5 | 3 Şub 2025 |
40Planlayın | CVE-2025-53823İstismar yok | WeGIA vulnerable to SQL Injection (Blind Time-Based) in `processa_deletar_socio.php` parameter `id_socio`wegia · wegia · CWE-89 | Kritik10,0 | — | %0,5 | 14 Tem 2025 |
39İzleyin | CVE-2025-22133İstismar yok | WeGIA Allows Arbitrary File Upload with Remote Code Execution (RCE)wegia · wegia · CWE-94 | Kritik9,9 | — | %0,7 | 7 Oca 2025 |
- CVE-2025-2714041Planlayın
WeGIA vulnerable to OS Command Injection at endpoint 'importar_dump.php' parameter 'import' (RCE)
KritikCVSS 10,0İstismar yokEPSS %3wegia · wegia24 Şub 2025
- CVE-2025-2661341Planlayın
OS Command Injection endpoint 'gerenciar_backup.php' parameter 'file' (RCE) in WeGIA
KritikCVSS 10,0İstismar yokEPSS %3wegia · wegia18 Şub 2025
- CVE-2025-5020140Planlayın
WeGIA OS Command Injection in debug_info.php parameter 'branch'
KritikCVSS 9,8İstismar yokEPSS %5wegia · wegia19 Haz 2025
- CVE-2026-2841140Planlayın
WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`
KritikCVSS 9,8Kavram kanıtıEPSS %3wegia · wegia27 Şub 2026
- CVE-2025-5516940Planlayın
WeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'
KritikCVSS 10,0Kavram kanıtıEPSS %2wegia · wegia12 Ağu 2025
- CVE-2025-2661640Planlayın
Path Traversal endpoint 'exportar_dump.php' parameter 'file' in WeGIA
KritikCVSS 10,0İstismar yokEPSS %1wegia · wegia18 Şub 2025
- CVE-2025-3036440Planlayın
WeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionario
KritikCVSS 10,0İstismar yokEPSS %1wegia · wegia27 Mar 2025
- CVE-2025-2321940Planlayın
WeGIA has a SQL Injection endpoint 'adicionar_cor.php' parameter 'cor'
KritikCVSS 10,0İstismar yokEPSS %1wegia · wegia20 Oca 2025
- CVE-2025-2322040Planlayın
WeGIA has a SQL Injection endpoint 'adicionar_raca.php' parameter 'raca'
KritikCVSS 10,0İstismar yokEPSS %1wegia · wegia20 Oca 2025
- CVE-2025-2321840Planlayın
WeGIA has a SQL Injection endpoint 'adicionar_especie.php' parameter 'especie'
KritikCVSS 10,0İstismar yokEPSS %1wegia · wegia20 Oca 2025
- CVE-2025-2660640Planlayın
SQL Injection endpoint 'informacao_adicional.php' parameter 'id_descricao' in WeGIA
KritikCVSS 10,0İstismar yokEPSS %1wegia · wegia18 Şub 2025
- CVE-2025-2660840Planlayın
SQL Injection endpoint 'dependente_docdependente.php' parameter 'id_dependente', 'id_doc' in WeGIA
KritikCVSS 10,0İstismar yokEPSS %1wegia · wegia18 Şub 2025
- CVE-2025-2661740Planlayın
SQL Injection endpoint 'historico_paciente.php' parameter 'id_fichamedica' in WeGIA
KritikCVSS 10,0İstismar yokEPSS %1wegia · wegia18 Şub 2025
- CVE-2025-2660740Planlayın
SQL Injection endpoint 'documento_excluir.php' parameter 'id_funcionario' in WeGIA
KritikCVSS 10,0İstismar yokEPSS %1wegia · wegia18 Şub 2025
- CVE-2025-2660940Planlayın
SQL Injection endpoint 'familiar_docfamiliar.php' parameter 'id_dependente', 'id_doc' in WeGIA
KritikCVSS 10,0İstismar yokEPSS %1wegia · wegia18 Şub 2025
- CVE-2025-2495740Planlayın
SQL Injection endpoint 'get_detalhes_socio.php' parameter 'id_socio' in WeGIA
KritikCVSS 10,0İstismar yokEPSS %1wegia · wegia3 Şub 2025
- CVE-2025-2661140Planlayın
SQL Injection endpoint 'remover_produto.php' parameter 'id_produto' in WeGIA
KritikCVSS 10,0İstismar yokEPSS %1wegia · wegia18 Şub 2025
- CVE-2025-2661240Planlayın
SQL Injection endpoint 'adicionar_almoxarife.php' parameter 'id_almoxarifado', 'id_funcionario' in WeGIA
KritikCVSS 10,0İstismar yokEPSS %1wegia · wegia18 Şub 2025
- CVE-2025-2490640Planlayın
SQL Injection endpoint 'get_detalhes_cobranca.php' parameter 'codigo' in WeGIA
KritikCVSS 10,0İstismar yokEPSS %1wegia · wegia3 Şub 2025
- CVE-2025-4682840Planlayın
Unauthenticated SQL Injection on get_socios.php endpoint
KritikCVSS 10,0İstismar yokEPSS %1wegia · wegia7 May 2025
- CVE-2025-5309140Planlayın
WeGIA has Unauthenticated Time-Based Blind SQL Injection in almox Parameter
KritikCVSS 10,0İstismar yokEPSS %1wegia · wegia27 Haz 2025
- CVE-2025-3036740Planlayın
WeGIA SQL Injection Vulnerability in nextPage Parameter on control.php Endpoint
KritikCVSS 10,0İstismar yokEPSS %1wegia · wegia27 Mar 2025
- CVE-2025-2490540Planlayın
SQL Injection endpoint 'get_codigobarras_cobranca.php' parameter 'codigo' in WeGIA
KritikCVSS 10,0İstismar yokEPSS %1wegia · wegia3 Şub 2025
- CVE-2025-5382340Planlayın
WeGIA vulnerable to SQL Injection (Blind Time-Based) in `processa_deletar_socio.php` parameter `id_socio`
KritikCVSS 10,0İstismar yokEPSS %0wegia · wegia14 Tem 2025
- CVE-2025-2213339İzleyin
WeGIA Allows Arbitrary File Upload with Remote Code Execution (RCE)
KritikCVSS 9,9İstismar yokEPSS %1wegia · wegia7 Oca 2025