CVE-2025-62179High· 8.8▾ TwilightWeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, a SQL Injection vulnerability was identified in the /html/funcionario/cadastro_funcionario_pessoa_existente.php endpoint, spe…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, a SQL Injection vulnerability was identified in the /html/funcionario/cadastro_funcionario_pessoa_existente.php endpoint, specifically in the cpf parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. This vulnerability is fixed in 3.5.1.
wegia < 3.5.1Upgrade past the affected range:
wegia 3.5.1Connected by shared product, vendor, weakness, or advisory.
CVE-2025-67501High· 8.8WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users
CVE-2026-55684Critical· 9.8WeGIA is a web manager for charitable institutions
CVE-2026-55681High· 8.8WeGIA is a web manager for charitable institutions
CVE-2026-55683Critical· 9.8WeGIA is a web manager for charitable institutions
CVE-2026-55679Medium· 6.5WeGIA is a web manager for charitable institutions
CVE-2026-55680Critical· 9.8WeGIA is a web manager for charitable institutions