PT-2025-30059 · Wegia · Wegia

Whyrusx · Published 2025-07-17 · Updated 2025-07-18 · CVE-2025-54079

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.4.6

Description WeGIA is an open source web manager. A SQL Injection vulnerability exists in the /html/atendido/Profile Atendido.php endpoint, specifically in the idatendido parameter. This allows an attacker to execute arbitrary SQL queries and potentially access sensitive information.

Recommendations Update WeGIA to version 3.4.6 or later.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2025-09398

CVE-2025-54079

GHSA-G4V3-J8W5-33V3

Affected Products

Wegia

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54079.json · Exploit
• https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-g4v3-j8w5-33v3 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54079 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09398 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-54079 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-54079 · Security Note
• https://twitter.com/CVEnew/status/1946244021887656404 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1946252468221882413 · Twitter Post