PT-2025-35328 · Wegia · Wegia

Farinap5 · Published 2025-08-29 · Updated 2025-08-30 · CVE-2025-58159

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.4.11

Description WeGIA is a Web manager for charitable institutions. A remote code execution issue was identified due to improper validation of uploaded files. The application allows attackers to upload files with arbitrary filenames, including those with a .php extension. Uploaded files are written to disk without adequate sanitization or extension restrictions, allowing a spreadsheet file followed by PHP code to be uploaded and executed on the server, leading to arbitrary code execution.

Recommendations Upgrade to version 3.4.11 or later.

Exploit

Fix

RCE

Unrestricted File Upload

Code Injection

Weakness Enumeration

CWE-434

CWE-94

Related Identifiers

CVE-2025-58159

GHSA-WJ2C-237G-CGQP

Affected Products

Wegia

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58159.json · Exploit
• 🔥 https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-wj2c-237g-cgqp · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-58159 · Security Note
• https://osv.dev/vulnerability/CVE-2025-58159 · Vendor Advisory
• https://twitter.com/CveFindCom/status/1961559549204136230 · Twitter Post
• https://twitter.com/CVEnew/status/1961557612102914443 · Twitter Post
• https://t.me/CVEtracker/31299 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1961617950642745661 · Twitter Post
• https://t.me/cveNotify/133980 · Telegram Post
• https://twitter.com/VulnWatchX/status/1961887776397254958 · Twitter Post