Unrated severityNVD Advisory· Published Jun 27, 2025· Updated Jun 27, 2025
WeGIA has Unauthenticated Time-Based Blind SQL Injection in almox Parameter
CVE-2025-53091
Description
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Time-Based Blind SQL Injection vulnerability was discovered in version 3.3.3 the almox parameter of the /controle/getProdutosPorAlmox.php endpoint. This issue allows any unauthenticated attacker to inject arbitrary SQL queries, potentially leading to unauthorized data access or further exploitation depending on database configuration. Version 3.4.0 fixes the issue.
Affected products
1- Range: = 3.3.3
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-pmf9-2rc3-vvxxmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.