CVE-2025-46828
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-46828
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-46828.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-46828
- Aliases
-
- GHSA-5qw5-q55h-6qg7
- Published
- 2025-05-07T18:15:43Z
- Modified
- 2025-05-19T10:29:22.738343Z
- Summary
- [none]
- Details
-
WeGIA is a web manager for charitable institutions. An unauthenticated SQL Injection vulnerability was identified in versions up to and including 3.3.0 in the endpoint
/html/socio/sistema/get_socios.php, specifically in the query parameter. This issue allows attackers to inject and execute arbitrary SQL statements against the application's underlying database. As a result, it may lead to data exfiltration, authentication bypass, or complete database compromise. Version 3.3.1 fixes the issue. - References