CVE-2026-33991 in LabRedesCefetRJ WeGIA
摘要 (英语)
WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file `html/socio/sistema/deletar_tag.php` uses `extract($_REQUEST)` on line 14 and directly concatenates the `$id_tag` variable into SQL queries on lines 16-17 without prepared statements or sanitization. Version 3.6.7 patches the vulnerability.
负责
GitHub_M
预定
2026-03-24
披露
2026-03-28
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 354062 | LabRedesCefetRJ WeGIA deletar_tag.php deletar_tag SQL注入 | 89 | 未定义 | 官方修复 | CVE-2026-33991 |