CVE-2025-53527

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-53527
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-53527.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-53527
Aliases
  • GHSA-43xw-c4g6-jgff
Published
2025-07-07T16:47:04.624Z
Modified
2026-04-02T12:52:40.519867Z
Severity
  • 8.3 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N CVSS Calculator
Summary
WeGIA allows Time-Based Blind SQL Injection in the relatorio_geracao.php endpoint
Details

WeGIA is a web manager for charitable institutions. A Time-Based Blind SQL Injection vulnerability was discovered in the almox parameter of the /controle/relatorio_geracao.php endpoint. This issue allows attacker to inject arbitrary SQL queries, potentially leading to unauthorized data access or further exploitation depending on database configuration. This vulnerability is fixed in 3.4.1.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53527.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-89"
    ]
}
References

Affected packages

Git / github.com/labredescefetrj/wegia

Affected ranges

Type
GIT
Repo
https://github.com/labredescefetrj/wegia
Events
Introduced
288727f260dafc571c9d7e0126a07d21f1863f9b
Fixed
0da687b7b9ebb3bf64c43fc0ba556eb654ebd583

Affected versions

3.*
3.3.3
3.4.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-53527.json"