SQL Injection Vulnerability in WeGIA Web Manager for Charitable Institutions

CVE-2025-59939

What is CVE-2025-59939?

WeGIA, a web manager designed for charitable institutions, contains a vulnerability that allows for SQL Injection through its control.php endpoint. Attackers can exploit this flaw by manipulating the 'id_produto' parameter when attempting to delete products. This can potentially lead to unauthorized data access or manipulation. The issue was addressed in version 3.5.0 with necessary improvements in input validation and prepared statement safeguards to enhance security.

References