CVE-2025-24905

Summary

CVE-2025-24905 is a SQL Injection vulnerability discovered in the `get_codigobarras_cobranca.php` endpoint of the WeGIA application, a Web Manager for Charitable Institutions. An attacker who is already authorized could exploit this vulnerability to execute arbitrary SQL queries, potentially gaining unauthorized access to or deletion of sensitive data. This issue has been resolved in version 3.2.12, and all users are strongly urged to upgrade. Unfortunately, there are no known workarounds for this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.