Pentestju

**Name of the Vulnerable Software and Affected Versions** WeGIA versions prior to 3.7.3 **Description** When a user logs in via the 'html/login.php' endpoint, the system hashes the submitted password using the PHP `hash()` function with the SHA-256 algorithm and no salt. The password change flow in 'controle/FuncionarioControle.php' follows the same pattern. Because SHA-256 is a general-purpose cryptographic hash designed for speed rather than password storage, the absence of a salt means identical passwords produce identical digests. This allows the hash database to be compromised using a precomputed rainbow table lookup, which is a technique used to reverse cryptographic hash functions using large precomputed tables of hashes. **Recommendations** Update to version 3.7.3.

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.6.9 Description WeGIA, a Web manager for charitable institutions, contains a SQL injection issue in the 'dao/memorando/DespachoDAO.php' file. The `id memorando` parameter, obtained from the `$ REQUEST` variable, is used in SQL queries without proper validation. This allows authenticated users to execute arbitrary SQL commands against the database. Recommendations Update to version 3.6.9 or later.