Vulnerabilities in LabRedesCefetRJ
190 resultsCVE-2026-33133HIGHWeGIA has an arbitrary SQL execution vulnerability via crafted backup archiveEPSS 0.4%CVE-2026-35395HIGHWeGIA has a SQL Injection in DespachoDAO.php via id_memorando parameterEPSS 0.4%CVE-2026-76634HIGHWeGIA < 3.9.2 Insecure Direct Object Reference via profile_funcionario.phpEPSS 0.4%CVE-2025-6694MEDIUMLabRedesCefetRJ WeGIA Adicionar Unidade adicionar_unidade.php cross site scriptingEPSS 0.4%CVE-2026-31896CRITICALWeGIA has a Time-Based Blind SQL Injection in remover_produto_ocultar.phpEPSS 0.4%CVE-2026-33991HIGHWeGIA has SQL Injection in deletar_tag.phpEPSS 0.4%CVE-2025-6698MEDIUMLabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoSaida.php cross site scriptingEPSS 0.4%CVE-2025-6697MEDIUMLabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoEntrada.php cross site scriptingEPSS 0.4%CVE-2025-6699MEDIUMLabRedesCefetRJ WeGIA Cadastro de Funcionário cadastro_funcionario.php cross site scriptingEPSS 0.4%CVE-2025-6695MEDIUMLabRedesCefetRJ WeGIA Additional Categoria adicionar_categoria.php cross site scriptingEPSS 0.4%CVE-2025-6696MEDIUMLabRedesCefetRJ WeGIA Cadastro de Atendio Cadastro_Atendido.php cross site scriptingEPSS 0.4%CVE-2025-59939HIGHWeGIA vulnerable to SQL Injection into method `excluir` of the `ProdutoControle` class in the parameter `id_produto`.EPSS 0.4%CVE-2025-22613MEDIUMWeGIA Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao'EPSS 0.4%CVE-2025-58453HIGHWeGIA vulnerable to Blind Time-Based SQL Injection in endpoint 'exibe_anexo.php' parameter 'id_anexo'EPSS 0.4%CVE-2025-58454HIGHWeGIA vulnerable to Blind Time-Based SQL Injection in endpoint 'listar_despachos.php' parameter 'id_memorando'EPSS 0.4%CVE-2025-22597HIGHWeGIA has a Cross-Site Scripting (XSS) Stored endpoint 'CobrancaController.php' parameter 'local_recepcao'EPSS 0.4%CVE-2025-22598HIGHWeGIA has a Cross-Site Scripting (XSS) Stored endpoint 'cadastrarSocio.php' parameter 'nome'EPSS 0.4%CVE-2025-22619MEDIUMWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_permissoes.php' parameter 'msg_c'EPSS 0.4%CVE-2026-42870MEDIUMWeGIA: Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao'EPSS 0.4%CVE-2025-22618MEDIUMWeGIA Cross-Site Scripting (XSS) Stored endpoint 'adicionar_cargo.php' parameter 'cargo'EPSS 0.3%