Shboan08

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.12 Description: A SQL Injection vulnerability was discovered in the WeGIA application, `salvar cargo.php` endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing access to or deletion of sensitive information. Recommendations: For versions prior to 3.2.12, upgrade to version 3.2.12 to mitigate the risk of unauthorized data access or deletion. As a temporary workaround, consider restricting access to the `salvar cargo.php` endpoint until the issue is resolved. There are no known workarounds for this vulnerability.