https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T15:22:23.750610+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-46828 CVE-2025-46828 — Unauthenticated SQL Injection on get_socios.php endpoint 2026-10-23T15:22:23.766893+00:00

Affected: LabRedesCefetRJ WeGIA

WeGIA is a web manager for charitable institutions. An unauthenticated SQL Injection vulnerability was identified in versions up to and including 3.3.0 in the endpoint `/html/socio/sistema/get_socios.php`, specifically in the query parameter. This issue allows attackers to inject and execute arbitrary SQL statements against the application's underlying database. As a result, it may lead to data exfiltration, authentication bypass, or complete database compromise. Version 3.3.1 fixes the issue.