Skip to content
OpenAdvisories
Critical · 10.0 CVE-2025-30364 EUVD-2025-8513

WeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionario

Published Mar 27, 2025 · Updated Mar 27, 2025 · Assigned by GitHub_M

Description

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.2.8 in the endpoint /WeGIA/html/funcionario/remuneracao.php, in the id_funcionario parameter. This vulnerability allows the execution of arbitrary SQL commands, which can compromise the confidentiality, integrity, and availability of stored data. Version 3.2.8 fixes the issue.

Affected products

VendorProductAffectedFixed
LabRedesCefetRJ WeGIA < 3.2.8 —

References