Labredescefetrj vulnerabilities
190 CVEs and advisories name Labredescefetrj as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-6699LabRedesCefetRJ WeGIA Cadastro de Funcionário cadastro_funcionario.php cross site scripting
- CVE-2025-6698LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoSaida.php cross site scripting
- CVE-2025-6697LabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoEntrada.php cross site scripting
- CVE-2025-6696LabRedesCefetRJ WeGIA Cadastro de Atendio Cadastro_Atendido.php cross site scripting
- CVE-2025-6695LabRedesCefetRJ WeGIA Additional Categoria adicionar_categoria.php cross site scripting
- CVE-2025-6694LabRedesCefetRJ WeGIA Adicionar Unidade adicionar_unidade.php cross site scripting
- CVE-2025-52474WeGIA SQL Injection Vulnerability in id Parameter on control.php Endpoint
- CVE-2025-50201WeGIA OS Command Injection in debug_info.php parameter 'branch'
- CVE-2025-46828Unauthenticated SQL Injection on get_socios.php endpoint
- CVE-2025-30367WeGIA SQL Injection Vulnerability in nextPage Parameter on control.php Endpoint
- CVE-2025-30366WeGIA vulnerable to Stored XSS in personalizacao.php
- CVE-2025-30365SQL Injection in query_geracao_auto.php
- CVE-2025-30364WeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionario
- CVE-2025-30363WeGIA vulnerable to Stored XSS in documentos_funcionario.php parameter dados_addInfo
- CVE-2025-30362WeGIA vulnerable to Stored XSS in documentos_funcionario.php parameter id
- CVE-2025-30361WeGIA Vulnerable to Broken Authentication - Old Password Validation
- CVE-2025-29782WeGIA Cross-Site Scripting (XSS) Stored in endpoint `adicionar_tipo_docs_atendido.php` parameter `tipo`
- CVE-2025-27499WeGIA has a stored Cross-Site Scripting (XSS) in 'processa_edicao_socio.php' via the 'socio_nome' parameter
- CVE-2025-27419Denial of Service (DoS) in WeGIA due to Recursive Crawling of Dynamic URLs
- CVE-2025-27420WeGIA contains a Stored Cross-Site Scripting (XSS) in 'atendido_parentesco_adicionar.php' via the 'descricao' parameter
- CVE-2025-27418WeGIA contains a Stored Cross-Site Scripting (XSS) in 'adicionar_tipo_atendido.php' via the 'tipo' parameter
- CVE-2025-27417WeGIA Contains a Stored Cross-Site Scripting (XSS) in 'adicionar_status_atendido.php' via the 'status' parameter
- CVE-2025-27140WeGIA vulnerable to OS Command Injection at endpoint 'importar_dump.php' parameter 'import' (RCE)
- CVE-2025-27133WeGIA has SQL Injection endpoint at 'dao/pet/adicionar_tipo_exame.php' parameter 'tipo_exame'
- CVE-2025-27096SQL Injection endpoint 'html/personalizacao_upload.php' parameter 'id_campo' in WeGIA
- CVE-2025-26605SQL Injection endpoint 'deletar_cargo.php' parameter 'id_cargo' in WeGIA
- CVE-2025-26606SQL Injection endpoint 'informacao_adicional.php' parameter 'id_descricao' in WeGIA
- CVE-2025-26607SQL Injection endpoint 'documento_excluir.php' parameter 'id_funcionario' in WeGIA
- CVE-2025-26608SQL Injection endpoint 'dependente_docdependente.php' parameter 'id_dependente', 'id_doc' in WeGIA
- CVE-2025-26609SQL Injection endpoint 'familiar_docfamiliar.php' parameter 'id_dependente', 'id_doc' in WeGIA