CVE-2025-23218: WeGIA has a SQL Injection endpoint 'adicionar_especie.php' parameter 'especie'
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the WeGIA application, specifically in the adicionarespecie.php endpoint. This vulnerability allows attackers to execute arbitrary SQL commands in the database, allowing unauthorized access to sensitive information. During the exploit, it was possible to perform a complete dump of the application's database, highlighting the severity of the flaw. This vulnerability is fixed in 3.2.10.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-23218?
CVE-2025-23218 is classified as a high-severity vulnerability due to its potential for SQL Injection attacks.
How do I fix CVE-2025-23218?
To fix CVE-2025-23218, update the WeGIA application to version 3.2.10 or later, which addresses this SQL Injection vulnerability.
What is affected by CVE-2025-23218?
CVE-2025-23218 affects WeGIA applications up to version 3.2.10, specifically targeting the adicionar_especie.php endpoint.
What type of vulnerability is CVE-2025-23218?
CVE-2025-23218 is a SQL Injection vulnerability that allows attackers to execute arbitrary SQL commands.
Can CVE-2025-23218 lead to data breaches?
Yes, if exploited, CVE-2025-23218 could potentially lead to unauthorized data access and breaches.