Vulnerabilities in LabRedesCefetRJ
190 resultsCVE-2026-42872MEDIUMWeGIA: Reflected XSS in listar_arquivos_etapa.phpEPSS 0.2%CVE-2026-40286HIGHWeGIA has Cross-Site Scripting in Controle de ContribuiçãoEPSS 0.2%CVE-2026-40283MEDIUMWeGIA has stored XSS in profile_paciente.phpEPSS 0.2%CVE-2026-35474MEDIUMWeGIA - Open Redirect - atualizacao redirection - Unvalidated $_GET['redirect']EPSS 0.2%CVE-2026-35473MEDIUMWeGIA - Open Redirect - IentradaControle - listarId() - Unvalidated $_GET['nextPage']EPSS 0.2%CVE-2026-35475MEDIUMWeGIA - Open Redirect - backup redirection — Unvalidated $_GET['redirect']EPSS 0.2%CVE-2026-45335MEDIUMWeGIA: Middleware whitelist bypass → open redirect via InternoControle.nextPageEPSS 0.2%CVE-2025-61604HIGHWeGIA: Cross-Site Request Forgery (CSRF) Vulnerability in `control.php` EndpointEPSS 0.2%CVE-2026-45027MEDIUMWeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.phpEPSS 0.2%CVE-2026-61671HIGHWeGIA: Systemic IDOR + Missing CSRF — extract($_REQUEST) in All Controle ClassesEPSS 0.2%