Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 09:00:24 +0000 CVE-2026-31895 — WeGIA has a SQL Injection via Direct Query Interpolation in restaurar_produto.php https://cve.radiocsirt.org/vuln/cve-2026-31895 <p><strong>Affected:</strong> LabRedesCefetRJ WeGIA</p> <p>WeGIA is a web manager for charitable institutions. Prior to version 3.6.6, WeGIA (Web gerenciador para instituições assistenciais) contains a SQL injection vulnerability in html/matPat/restaurar_produto.php. The id_produto parameter from $_GET is directly interpolated into SQL queries without parameterization or sanitization. This vulnerability is fixed in 3.6.6.</p> <p><strong>Affected:</strong> LabRedesCefetRJ WeGIA</p> <p>WeGIA is a web manager for charitable institutions. Prior to version 3.6.6, WeGIA (Web gerenciador para instituições assistenciais) contains a SQL injection vulnerability in html/matPat/restaurar_produto.php. The id_produto parameter from $_GET is directly interpolated into SQL queries without parameterization or sanitization. This vulnerability is fixed in 3.6.6.</p> https://cve.radiocsirt.org/vuln/cve-2026-31895