Vulnerabilities in LabRedesCefetRJ
190 resultsCVE-2025-24020MEDIUMWeGIA Open Redirect vulnerabilityEPSS 0.3%CVE-2026-61673MEDIUMWeGIA: Stored DOM XSS in listar_despachos.php Allows Account TakeoverEPSS 0.3%CVE-2025-23037MEDIUMCross-Site Scripting (XSS) Stored endpoint 'control.php' parameter 'cargo' in WeGIAEPSS 0.3%CVE-2025-23036MEDIUMCross-Site Scripting (XSS) Reflected endpoint 'pre_cadastro_funcionario.php' parameter 'msg_e' in WeGIAEPSS 0.3%CVE-2025-22143MEDIUMWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'listar_permissoes.php' parameter 'msg_e'EPSS 0.3%CVE-2026-40285HIGHWeGIA has SQL Injection via Session Variable Override in DespachoControle.phpEPSS 0.3%CVE-2025-53932MEDIUMWeGIA vulnerable to Reflected Cross-Site Scripting via endpoint 'cadastro_adotante.php' parameter 'cpf'EPSS 0.3%CVE-2025-53935MEDIUMWeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `id`EPSS 0.3%CVE-2025-53936MEDIUMWeGIA vulnerable to Reflected Cross-Site Scripting via endpoint `personalizacao_selecao.php` parameter `nome_car`EPSS 0.3%CVE-2026-33134CRITICALWeGIA has Authenticated Time-Based Blind SQL Injection in `restaurar_produto.php` via `id_produto` parameterEPSS 0.3%CVE-2025-23030MEDIUMCross-Site Scripting (XSS) Reflected endpoint 'cadastro_funcionario.php' parameter 'cpf' in WeGIAEPSS 0.3%CVE-2025-23034MEDIUMCross-Site Scripting (XSS) Reflected endpoint 'tags.php' parameter 'msg_e' in WeGIAEPSS 0.3%CVE-2025-22596MEDIUMWeGIA has a Cross-Site Scripting (XSS) Reflected endpoint 'modulos_visiveis.php' parameter'msg_c'EPSS 0.3%CVE-2025-57764MEDIUMWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'cargos.php' parameter 'msg_e'EPSS 0.3%CVE-2025-57765MEDIUMWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'pre_cadastro_adotante.php' parameter 'msg_e'EPSS 0.3%CVE-2026-23731MEDIUMWeGIA Clickjacking VulnerabilityEPSS 0.3%CVE-2025-22617MEDIUMWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'editar_socio.php' parameter 'socio'EPSS 0.3%CVE-2025-22615MEDIUMWeGIA Cross-Site Scripting (XSS) Reflected endpoint 'Cadastro_Atendido.php' parameter 'cpf'EPSS 0.3%CVE-2025-53934MEDIUMWeGIA vulnerable to Stored Cross-Site Scripting via endpoint 'control.php' parameter 'descricao_emergencia'EPSS 0.3%CVE-2025-53931MEDIUMWeGIA vulnerable to Stored Cross-Site Scripting via endpoint `adicionar_raca.php` parameter `raca`EPSS 0.3%