CVE-2025-23219
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jan 20, 2025
Updated: Jan 21, 2025
CWE ID 89
Summary
CVE-2025-23219 is a SQL Injection vulnerability discovered in the Portuguese open source web manager, WeGIA. The affected component is the adicionar_cor.php endpoint. This flaw enables attackers to execute unauthorized SQL commands in the backend database, potentially granting them unauthorized access to sensitive information. Exploitation of this vulnerability resulted in a complete database dump, emphasizing its seriousness. The vulnerability has been rectified in WeGIA version 3.2.10.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.