Vulnerabilidades en LabRedesCefetRJ
190 resultadosCVE-2025-55170MEDIUMWeGIA reflected XSS via `verificacao` and `redir_config` param at endpoint `/html/alterar_senha.php`EPSS 0.5%CVE-2026-31894MEDIUMWeGIA affected by arbitrary file read via symlink in backup restoreEPSS 0.5%CVE-2025-53527HIGHWeGIA allows Time-Based Blind SQL Injection in the relatorio_geracao.php endpointEPSS 0.5%CVE-2025-61665HIGHWeGIA: Broken Access Control in `get_relatorios_socios.php` EndpointEPSS 0.5%CVE-2026-55684CRITICALWeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.phpEPSS 0.5%CVE-2025-53530HIGHWeGIA allows Uncontrolled Resource Consumption via the errorstr parameterEPSS 0.5%CVE-2025-53531HIGHWeGIA allows Uncontrolled Resource Consumption via the fid parameterEPSS 0.5%CVE-2025-55168CRITICALWeGIA SQL Injection via id_fichamedica at endpoint `GET /html/saude/aplicar_medicamento.php`EPSS 0.5%CVE-2025-53946CRITICALWeGIA vulnerable to SQL Injection in endpoint profile_paciente.php parameter id_fichamedicaEPSS 0.4%CVE-2025-54079CRITICALWeGIA vulnerable to SQL Injection (Blind Time-Based) in endpoint 'Profile_Atendido.php' parameter 'idatendido'EPSS 0.4%CVE-2026-31895HIGHWeGIA has a SQL Injection via Direct Query Interpolation in restaurar_produto.phpEPSS 0.4%CVE-2026-76633HIGHWeGIA < 3.9.2 Authorization Bypass Password Change via alterarSenhaEPSS 0.4%CVE-2025-61605CRITICALWeGIA: SQL Injection (Blind Time-Based) Vulnerability in /pet/profile_pet.php EndpointEPSS 0.4%CVE-2026-55682HIGHWeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.phpEPSS 0.4%CVE-2025-61603CRITICALWeGIA: SQL Injection (Blind Time-Based) Vulnerability in API `descricao` ParameterEPSS 0.4%CVE-2025-57761CRITICALWeGIA SQL Injection vulnerability via 'id_funcionario' param at endpoint `/html/funcionario/dependente_remover.php`EPSS 0.4%CVE-2025-62179HIGHWeGIA SQL Injection via 'cpf' param at endpoint `/html/funcionario/cadastro_funcionario_pessoa_existente.php`EPSS 0.4%CVE-2025-22600MEDIUMWeGIA has a Cross-Site Scripting (XSS) Reflected endpoint `configuracao_doacao.php` parameter `avulso`EPSS 0.4%CVE-2025-22599MEDIUMWeGIA has a Cross-Site Scripting (XSS) Reflected endpoint `home.php` parameter `msg_c`EPSS 0.4%CVE-2026-23723HIGHWeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameterEPSS 0.4%