WeGIA, a web manager for charitable institutions, contains a stored cross-site scripting flaw in the textoProntuario field of the medical record history page (saude/historico_prontuarios.php). An attacker who can create or access a patient's medical record can store JavaScript that runs in the browser of another user who opens the affected history page. Successful exploitation can lead to session cookie theft and possible account compromise, depending on the victim's privileges.
LabRedesCefetRJ · WeGIA
WeGIA, a web manager for charitable institutions, contains an SQL injection flaw in the billing endpoint cadastro_cobrancas_geracao.php. Request parameters are passed through extract($_REQUEST) and concatenated into a raw INSERT statement without proper escaping. An unauthenticated remote attacker can execute arbitrary SQL to read or modify billing, member, employee, permission and credential data, or to delete database tables.
LabRedesCefetRJ · WeGIA
WeGIA, a web manager for charitable institutions, contains an SQL injection flaw in the endpoint web/html/socio/sistema/cadastro_cobranca.php. The endpoint builds SQL statements from POST parameters via extract($_REQUEST) without prepared statements. A remote attacker without a login can run arbitrary SQL to read or modify billing records and credential data, or to delete or truncate tables.
LabRedesCefetRJ · WeGIA
WeGIA, a web manager for charitable institutions, contains an SQL injection in the Material & Patrimônio module. A second extract($_REQUEST) call overwrites an input value that was previously sanitized with intval(), so the raw value reaches SQL UPDATE statements. An authenticated user with access to this module can execute arbitrary SQL, which allows reading sensitive database records or modifying inventory and institutional data.
LabRedesCefetRJ · WeGIA
WeGIA, a web manager for charitable institutions, contains an unauthenticated SQL injection in cadastro_cobranca.php. The codigo parameter is inserted into an UPDATE statement without validation or parameter binding, and a quoted value bypasses type conversion. An attacker can send crafted POST requests without logging in to read or modify database content, including user credential hashes and billing records.
LabRedesCefetRJ · WeGIA
