CVE-2025-23218

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the WeGIA application, specifically in the adicionar_especie.php endpoint. This vulnerability allows attackers to execute arbitrary SQL commands in the database, allowing unauthorized access to sensitive information. During the exploit, it was possible to perform a complete dump of the application's database, highlighting the severity of the flaw. This vulnerability is fixed in 3.2.10.

• CWE-89

• https://github.com/LabRedesCefetRJ/WeGIA/commit/7465f785651c0cff65059bba96b015ab54235de4Patch
• https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-xhv4-88gx-hvghExploit, Vendor Advisory

Published

Jan 20, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-23212Tandoor Recipes is an application for managing recipes, plan…6.5
• CVE-2025-23213Tandoor Recipes is an application for managing recipes, plan…5.4
• CVE-2025-23214Cosmos provides users the ability self-host a home server by…6.9
• CVE-2025-23215PMD is an extensible multilanguage static code analyzer. The…9.3
• CVE-2025-23216Argo CD is a declarative, GitOps continuous delivery tool fo…6.8
• CVE-2025-23217mitmproxy is a interactive TLS-capable intercepting HTTP pro…8.2
• CVE-2025-23219WeGIA is an open source web manager with a focus on the Port…9.8
• CVE-2025-2322A vulnerability was found in 274056675 springboot-openai-cha…9.8
• CVE-2025-23220WeGIA is an open source web manager with a focus on the Port…9.8
• CVE-2025-23221Fedify is a TypeScript library for building federated server…5.4
• CVE-2025-23222An issue was discovered in Deepin dde-api-proxy through 1.0.…8.4
• CVE-2025-23225IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an a…6.5