CVE-2025-67501
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Versions 3.5.4 and below contain an SQL Injection vulnerability in the /html/matPat/editar_categoria.php endpoint. The application fails to properly validate and sanitize user inputs in the id_categoria parameter, which allows attackers to inject malicious SQL payloads for direct execution. This issue is fixed in version 3.5.5.
Vendor
Product
CWE
Yayın Tarihi
2025-12-10 00:16:11
Güncelleme
2025-12-18 20:12:16
Source Identifier
security-advisories@github.com
KEV Date Added
-