Labredescefetrj vulnerabilities
190 CVEs and advisories name Labredescefetrj as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-35399WeGIA has Stored XSS in backup file names
- CVE-2026-35472WeGIA - Open Redirect - EstoqueControle - listarTodos() - Unvalidated $_GET['nextPage']
- CVE-2026-35398WeGIA - Open Redirect - OrigemControle - listarTodos() & listarId_Nome() - Unvalidated $_GET['nextPage']
- CVE-2026-35396WeGIA - Open Redirect - IsaidaControle - listarId() - Unvalidated $_GET['nextPage']
- CVE-2026-35395WeGIA has a SQL Injection in DespachoDAO.php via id_memorando parameter
- CVE-2026-33991WeGIA has SQL Injection in deletar_tag.php
- CVE-2026-33136WeGIA has Reflected Cross-Site Scripting (XSS) in `listar_memorandos_ativos.php` via `sccd` parameter
- CVE-2026-33135WeGIA has Reflected Cross-Site Scripting (XSS) in `novo_memorandoo.php` via `sccs` parameter
- CVE-2026-33134WeGIA has Authenticated Time-Based Blind SQL Injection in `restaurar_produto.php` via `id_produto` parameter
- CVE-2026-33133WeGIA has an arbitrary SQL execution vulnerability via crafted backup archive
- CVE-2026-31896WeGIA has a Time-Based Blind SQL Injection in remover_produto_ocultar.php
- CVE-2026-31895WeGIA has a SQL Injection via Direct Query Interpolation in restaurar_produto.php
- CVE-2026-31894WeGIA affected by arbitrary file read via symlink in backup restore
- CVE-2026-28411WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`
- CVE-2026-28409WeGIA Vulnerable to Remote Code Execution (RCE) via OS Command Injection
- CVE-2026-28408WeGIA lacks authentication verification in adicionar_tipo_docs_atendido.php
- CVE-2026-23731WeGIA Clickjacking Vulnerability
- CVE-2026-23730WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=ProdutoControle)
- CVE-2026-23729WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle)
- CVE-2026-23728WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle)
- CVE-2026-23727WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle)
- CVE-2026-23726WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle)
- CVE-2026-23725WeGIA Stored Cross-Site Scripting (XSS) – nome Parameter on Adopters Information Page
- CVE-2026-23724WeGIA Stored Cross-Site Scripting (XSS) – atendido_idatendido Parameter on Occurrence Registration Page
- CVE-2026-23722WeGIA has a Reflected Cross-Site Scripting (XSS) vulnerability allowing arbitrary code execution and UI redressing.
- CVE-2026-23723WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameter
- CVE-2025-67501WeGIA is vulnerable to SQL Injection via editar_categoria endpoint parameter
- CVE-2025-67496WeGia is Vulnerable to XSS through id_pessoa Parameter on Password Configuration Page
- CVE-2025-62598WeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'action'
- CVE-2025-62597WeGIA Vulnerable to Reflected Cross-Site Scripting via Endpoint 'pessoa/editar_info_pessoal.php' Parameter 'sql'