Vulnerabilities in nilsonLazarin

5 results

CVE-2025-22133CRITICALWeGIA Allows Arbitrary File Upload with Remote Code Execution (RCE)EPSS 0.7%CVE-2025-22140CRITICALWeGIA SQL Injection (Blind Time-Based) endpoint 'dependente_listar_um.php' parameter 'id_dependente'EPSS 0.7%CVE-2025-22141CRITICALWeGIA SQL Injection (Blind Time-Based) endpoint 'verificar_recursos_cargo.php' parameter 'cargo'EPSS 0.7%CVE-2025-22132HIGHWeGIA has a Cross-Site Scripting (XSS) in File Upload FieldEPSS 0.4%CVE-2025-22139MEDIUMWeGIA Cross-Site Scripting (XSS) Reflected endpoint `configuracao_geral.php` parameter `msg`EPSS 0.3%