Security Advisory

CVE-2025-52474

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-06-19 03:40:47

Last updated 2025-06-23 17:34:42

Assigner GitHub_M

CVSS score 8.3

State PUBLISHED

Description

WeGIA is a web manager for charitable institutions. Prior to version 3.4.2, a SQL Injection vulnerability was identified in the id parameter of the /WeGIA/controle/control.php endpoint. This vulnerability allows attacker to manipulate SQL queries and access sensitive database information, such as table names and sensitive data. This issue has been patched in version 3.4.2.

← Browse all CVEs View on cve.org ↗