← Database

CVE-2025-27133

HIGH CVSS: 8.8 Published: 2025-02-24 Modified: 2026-06-17

Description

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was discovered in the WeGIA application prior to version 3.2.15 at the `adicionar_tipo_exame.php` endpoint. This vulnerability allows an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. Version 3.2.15 contains a patch for the issue.

Affected Platforms

Wegia Wegia

Weakness Type

CWE-89

References