Labredescefetrj vulnerabilities
190 CVEs and advisories name Labredescefetrj as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-62361WeGIA Open Redirect Vulnerability in `control.php` endpoint `nextPage` parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle)
- CVE-2025-62360WeGIA SQL Injection via 'id_dependente' param at endpoint `/html/funcionario/dependente_documento.php`
- CVE-2025-62359WeGIA Cross-Site Scripting (XSS) Reflected endpoint id_pet
- CVE-2025-62358WeGIA Reflected XSS to Account TakeOver at /html/configuracao/configuracao_geral.php via log parameter
- CVE-2025-62179WeGIA SQL Injection via 'cpf' param at endpoint `/html/funcionario/cadastro_funcionario_pessoa_existente.php`
- CVE-2025-62178WeGIA Cross-Site Scripting (XSS) Reflected endpoint '/html/atendido/cadastro_atendido_parentesco_pessoa_nova.php' parameter 'idatendido'
- CVE-2025-62177WeGIA vulnerable to SQL Injection via 'id_funcionario' param at endpoint `/html/funcionario/dependente_listar.php`
- CVE-2025-61665WeGIA: Broken Access Control in `get_relatorios_socios.php` Endpoint
- CVE-2025-61606WeGIA: Open Redirect Vulnerability in `control.php` endpoint
- CVE-2025-61605WeGIA: SQL Injection (Blind Time-Based) Vulnerability in /pet/profile_pet.php Endpoint
- CVE-2025-61604WeGIA: Cross-Site Request Forgery (CSRF) Vulnerability in `control.php` Endpoint
- CVE-2025-61603WeGIA: SQL Injection (Blind Time-Based) Vulnerability in API `descricao` Parameter
- CVE-2025-59939WeGIA vulnerable to SQL Injection into method `excluir` of the `ProdutoControle` class in the parameter `id_produto`.
- CVE-2025-58745WeGIA has a bypass for the fix for CVE-2025-22133 - Arbitrary File Upload leads to Remote Code Execution (RCE)
- CVE-2025-58454WeGIA vulnerable to Blind Time-Based SQL Injection in endpoint 'listar_despachos.php' parameter 'id_memorando'
- CVE-2025-58453WeGIA vulnerable to Blind Time-Based SQL Injection in endpoint 'exibe_anexo.php' parameter 'id_anexo'
- CVE-2025-58452WeGIA vulnerable to Reflected Cross-Site Scripting (XSS) in endpoint 'listar_despachos.php' parameter 'id_memorando'
- CVE-2025-58159WeGIA Authenticated Arbitrary File Upload Leading To Remote Code Execution (RCE)
- CVE-2025-57765WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'pre_cadastro_adotante.php' parameter 'msg_e'
- CVE-2025-57764WeGIA Cross-Site Scripting (XSS) Reflected endpoint 'cargos.php' parameter 'msg_e'
- CVE-2025-57763Cross-Site Scripting (XSS) Reflected in 'insere_despacho.php' parameter 'sccs'
- CVE-2025-57762WeGIA Stored Cross-Site Scripting (XSS) vulnerability in the endpoint 'dependente_docdependente.php' with parameter 'nome'
- CVE-2025-57761WeGIA SQL Injection vulnerability via 'id_funcionario' param at endpoint `/html/funcionario/dependente_remover.php`
- CVE-2025-55171WeGIA Anonymous Attacker can Delete Arbitrary Image file at endpoint `/html/personalizacao_remover.php`
- CVE-2025-55170WeGIA reflected XSS via `verificacao` and `redir_config` param at endpoint `/html/alterar_senha.php`
- CVE-2025-55169WeGIA Path Traversal at endpoint 'html/socio/sistema/download_remessa.php' via parameter 'file'
- CVE-2025-55168WeGIA SQL Injection via id_fichamedica at endpoint `GET /html/saude/aplicar_medicamento.php`
- CVE-2025-55167WeGIA SQL Injection via id_fichamedica at endpoint `GET/html/funcionario/dependente_remover.php`
- CVE-2025-54079WeGIA vulnerable to SQL Injection (Blind Time-Based) in endpoint 'Profile_Atendido.php' parameter 'idatendido'
- CVE-2025-54078WeGIA Reflected Cross-Site Scripting (XSS) vulnerability in endpoint 'personalizacao_imagem.php' parameter 'err'