| Package | Affected versions | Patched versions |
|---|---|---|
| wegia | < 3.4.6 | 3.4.6 |
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.4.6 in the endpoint `/html/atendido/Profile_Atendido.php`, in the `idatendido` parameter. This vulnerability allow an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. Version 3.4.6 fixes the issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free