CVE-2025-52474
19.06.2025, 04:15
WeGIA is a web manager for charitable institutions. Prior to version 3.4.2, a SQL Injection vulnerability was identified in the id parameter of the /WeGIA/controle/control.php endpoint. This vulnerability allows attacker to manipulate SQL queries and access sensitive database information, such as table names and sensitive data. This issue has been patched in version 3.4.2.
| Vendor | Product | Version |
|---|---|---|
| wegia | wegia | 𝑥 < 3.4.2 |
𝑥
= Vulnerable software versions