high7.2
CVE-2026-23723
WeGIA is a web manager for charitable institutions.
Impact
WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an authenticated SQL Injection vulnerability was identified in the Atendido_ocorrenciaControle endpoint via the id_memorando parameter. This flaw allows for full database exfiltration, exposure of sensitive PII, and potential arbitrary file reads in misconfigured environments. This vulnerability is fixed in 3.6.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wegia | Wegia | before 3.6.2 |