CVE-2025-26612: Critical SQL Injection in WeGIA adicionar_almoxarife
Critical SQL injection in WeGIA adicionar_almoxarife.php (CVSS 9.8). Fixed in 3.2.13; the advisory lists no workarounds, so upgrade and review access logs.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Critical SQL injection in WeGIA adicionar_almoxarife.php (CVSS 9.8). Fixed in 3.2.13; the advisory lists no workarounds, so upgrade and review access logs.
Critical SQL injection in WeGIA remover_produto.php (CVSS 9.8). Fixed in 3.2.13; the advisory lists no workarounds, so upgrade and review access logs.
Critical SQL injection in the WeGIA restaurar_produto_desocultar.php endpoint, fixed in 3.2.13. The advisory lists no workarounds, so upgrade now.
High severity SQL injection in Online Time Table Generator 1.0, parameter e. No fixed version is listed, so use bound queries and restrict access.
Critical SQL injection in WeGIA familiar_docfamiliar.php (CVSS 9.8). Fixed in 3.2.14; the advisory lists no workarounds, so upgrade and review access logs.
Critical SQL injection in the WeGIA dependente_docdependente.php endpoint, fixed in 3.2.13. The advisory lists no workarounds, so upgrade now.
Critical SQL injection in WeGIA documento_excluir.php (CVSS 9.8). Fixed in 3.2.13; the advisory lists no workarounds, so upgrade and review access logs.
Critical SQL injection in WeGIA informacao_adicional.php (CVSS 9.8). Fixed in 3.2.13; the advisory lists no workarounds, so upgrade and review access logs.
High severity SQL injection in Online Time Table Generator 1.0, parameter e. No fixed version is listed, so use bound queries and restrict access.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.