https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T04:34:28.410338+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-30365 CVE-2025-30365 — SQL Injection in query_geracao_auto.php 2026-10-24T04:34:28.411482+00:00

Affected: LabRedesCefetRJ WeGIA

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.2.8 in the endpoint /WeGIA/html/socio/sistema/controller/query_geracao_auto.php, specifically in the query parameter. This vulnerability allows the execution of arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. Version 3.2.8 fixes the issue.