Labredescefetrj vulnerabilities
190 CVEs and advisories name Labredescefetrj as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-61719WeGIA: Stored Cross-Site Scripting (XSS) in "historico_prontuarios.php" via "textoProntuario" Field
- CVE-2026-61673WeGIA: Stored DOM XSS in listar_despachos.php Allows Account Takeover
- CVE-2026-61671WeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle Classes
- CVE-2026-55684WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php
- CVE-2026-55682WeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.php
- CVE-2026-55681WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameter
- CVE-2026-55679WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection
- CVE-2026-55680WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter
- CVE-2026-55683WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php
- CVE-2026-54767WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php
- CVE-2026-54671WeGIA: Authorization Bypass via Empty Resource Array in InternoControle
- CVE-2026-54670WeGIA: Unauthenticated Auth Bypass + Local File Inclusion
- CVE-2026-76634WeGIA < 3.9.2 Insecure Direct Object Reference via profile_funcionario.php
- CVE-2026-76633WeGIA < 3.9.2 Authorization Bypass Password Change via alterarSenha
- CVE-2026-45335WeGIA: Middleware whitelist bypass → open redirect via InternoControle.nextPage
- CVE-2026-45027WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.php
- CVE-2026-45026WeGIA: Stored XSS in html/atendido/processo_aceitacao.php
- CVE-2026-45025WeGIA: Stored XSS in html/atendido/etapa_processo.php
- CVE-2026-42873WeGIA: Error Handling Upload DocDependente
- CVE-2026-42872WeGIA: Reflected XSS in listar_arquivos_etapa.php
- CVE-2026-42870WeGIA: Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao'
- CVE-2026-42871WeGIA: Error Handling familiar_docfamiliar
- CVE-2026-40286WeGIA has Cross-Site Scripting in Controle de Contribuição
- CVE-2026-40285WeGIA has SQL Injection via Session Variable Override in DespachoControle.php
- CVE-2026-40284WeGIA has stored XSS in listar_despachos.php
- CVE-2026-40282WeGIA has stored XSS in intercorrencia_visualizar.php
- CVE-2026-40283WeGIA has stored XSS in profile_paciente.php
- CVE-2026-35475WeGIA - Open Redirect - backup redirection — Unvalidated $_GET['redirect']
- CVE-2026-35474WeGIA - Open Redirect - atualizacao redirection - Unvalidated $_GET['redirect']
- CVE-2026-35473WeGIA - Open Redirect - IentradaControle - listarId() - Unvalidated $_GET['nextPage']