CVE-2025-30367
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Mar 27, 2025
Updated: Apr 10, 2025
CWE ID 89
Summary
CVE-2025-30367 is a SQL Injection vulnerability affecting versions prior to 3.2.6 of WeGIA, a web management system for charitable institutions. The vulnerability lies in the nextPage parameter of the /WeGIA/controle/control.php endpoint, allowing attackers to manipulate SQL queries and potentially gain unauthorized access to sensitive database information, including table names and data. This issue can lead to significant data breaches and should be addressed by upgrading to the patched version, 3.2.6.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- WeGIA
Affected Vendors
- WE Giá