CVE-2024-57031: SQL Injection
Published Jan 17, 2025
·Updated
WeGIA < 3.2.0 is vulnerable to SQL Injection in /funcionario/remuneracao.php via the idfuncionario parameter.
Affected Software
2 affected components
WeGIA WeGIA<3.2.0
WeGIA WeGIA<3.2.0
Event History
Jan 17, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-57031?
CVE-2024-57031 is classified as a high severity vulnerability due to its potential for SQL Injection, allowing attackers to manipulate database queries.
2
How do I fix CVE-2024-57031?
To fix CVE-2024-57031, upgrade WeGIA to version 3.2.0 or later to eliminate the SQL Injection vulnerability.
3
Which versions of WeGIA are affected by CVE-2024-57031?
CVE-2024-57031 affects all versions of WeGIA prior to 3.2.0.
4
What are the implications of CVE-2024-57031?
The implications of CVE-2024-57031 include unauthorized access to sensitive data and potential complete database compromise.
5
What specific component is vulnerable in CVE-2024-57031?
The specific component vulnerable in CVE-2024-57031 is the /funcionario/remuneracao.php page via the id_funcionario parameter.