CVE-2025-62360: WeGIA SQL Injection via 'id_dependente' param at endpoint `/html/funcionario/dependente_documento.php`
WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Prior to 3.5.1, a SQL Injection vulnerability was identified in the /html/funcionario/dependentedocumento.php endpoint, specifically in the iddependente parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. This vulnerability is fixed in 3.5.1.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62360?
CVE-2025-62360 has a high severity rating due to its SQL Injection vulnerability that can lead to unauthorized access to sensitive data.
How do I fix CVE-2025-62360?
To fix CVE-2025-62360, update WeGIA to version 3.5.1 or later where the vulnerability has been addressed.
Which versions of WeGIA are affected by CVE-2025-62360?
CVE-2025-62360 affects WeGIA versions prior to 3.5.1.
What type of vulnerability is CVE-2025-62360?
CVE-2025-62360 is a SQL Injection vulnerability found in the id_dependente parameter.
Can CVE-2025-62360 allow attackers to execute arbitrary SQL queries?
Yes, CVE-2025-62360 can allow attackers to execute arbitrary SQL queries, potentially compromising the database.