SQL Injection

Every one of the 61 is a mark on the map. Named now: 1 to 26, most at risk first.

1. WeGIA SQL Injection via 'id_dependente' param at endpoint `/html/funcionario/dependente_documento.php`CVE-2025-62360LabRedesCefetRJ · CVSS 9.4 · 0.9% likely

   CWE-89

2. WeGIA vulnerable to SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionarioCVE-2025-30364LabRedesCefetRJ · CVSS 10 · 0.7% likely

   CWE-89

3. SQL Injection in query_geracao_auto.phpCVE-2025-30365LabRedesCefetRJ · CVSS 9.4 · 0.7% likely

   CWE-89

4. WeGIA has a SQL Injection endpoint 'adicionar_raca.php' parameter 'raca'CVE-2025-23220LabRedesCefetRJ · CVSS 10 · 0.6% likely

   CWE-89

5. WeGIA has a SQL Injection endpoint 'adicionar_cor.php' parameter 'cor'CVE-2025-23219LabRedesCefetRJ · CVSS 10 · 0.6% likely

   CWE-89

6. WeGIA has a SQL Injection endpoint 'adicionar_especie.php' parameter 'especie'CVE-2025-23218LabRedesCefetRJ · CVSS 10 · 0.6% likely

   CWE-89

7. WeGIA SQL Injection via id_fichamedica at endpoint `GET/html/funcionario/dependente_remover.php`CVE-2025-55167LabRedesCefetRJ · CVSS 9.4 · 0.6% likely

   CWE-89

8. SQL Injection endpoint 'get_detalhes_socio.php' parameter 'id_socio' in WeGIACVE-2025-24957LabRedesCefetRJ · CVSS 10 · 0.6% likely

   CWE-89

9. SQL Injection endpoint 'salvar_cargo.php' parameter 'id_cargo' in WeGIACVE-2025-24902LabRedesCefetRJ · CVSS 9.4 · 0.6% likely

   CWE-89

10. WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.phpCVE-2026-55683LabRedesCefetRJ · CVSS 9.8 · 0.6% likely

    CWE-89

11. WeGIA has SQL Injection endpoint at 'dao/pet/adicionar_tipo_exame.php' parameter 'tipo_exame'CVE-2025-27133LabRedesCefetRJ · CVSS 9.4 · 0.6% likely

    CWE-89

12. SQL Injection endpoint 'historico_paciente.php' parameter 'id_fichamedica' in WeGIACVE-2025-26617LabRedesCefetRJ · CVSS 10 · 0.6% likely

    CWE-89

13. SQL Injection endpoint 'familiar_docfamiliar.php' parameter 'id_dependente', 'id_doc' in WeGIACVE-2025-26609LabRedesCefetRJ · CVSS 10 · 0.6% likely

    CWE-89

14. SQL Injection endpoint 'dependente_docdependente.php' parameter 'id_dependente', 'id_doc' in WeGIACVE-2025-26608LabRedesCefetRJ · CVSS 10 · 0.6% likely

    CWE-89

15. SQL Injection endpoint 'documento_excluir.php' parameter 'id_funcionario' in WeGIACVE-2025-26607LabRedesCefetRJ · CVSS 10 · 0.6% likely

    CWE-89

16. SQL Injection endpoint 'informacao_adicional.php' parameter 'id_descricao' in WeGIACVE-2025-26606LabRedesCefetRJ · CVSS 10 · 0.6% likely

    CWE-89

17. SQL Injection endpoint 'get_detalhes_cobranca.php' parameter 'codigo' in WeGIACVE-2025-24906LabRedesCefetRJ · CVSS 10 · 0.6% likely

    CWE-89

18. Unauthenticated SQL Injection on get_socios.php endpointCVE-2025-46828LabRedesCefetRJ · CVSS 10 · 0.6% likely

    CWE-89

19. SQL Injection endpoint 'html/personalizacao_upload.php' parameter 'id_campo' in WeGIACVE-2025-27096LabRedesCefetRJ · CVSS 9.4 · 0.6% likely

    CWE-89

20. SQL Injection endpoint 'remover_produto.php' parameter 'id_produto' in WeGIACVE-2025-26611LabRedesCefetRJ · CVSS 10 · 0.6% likely

    CWE-89

21. SQL Injection endpoint 'salvar_tag.php' parameter 'id_tag' in WeGIACVE-2025-24958LabRedesCefetRJ · CVSS 9.4 · 0.6% likely

    CWE-89

22. SQL Injection endpoint 'deletar_permissao.php' parameter 'c', 'a', 'r' in WeGIACVE-2025-24901LabRedesCefetRJ · CVSS 9.4 · 0.6% likely

    CWE-89

23. WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameterCVE-2026-55681LabRedesCefetRJ · CVSS 8.8 · 0.6% likely

    CWE-89

24. SQL Injection endpoint 'deletar_documento.php' parameter 'id_cargo' in WeGIACVE-2025-26614LabRedesCefetRJ · CVSS 9.4 · 0.6% likely

    CWE-89

25. SQL Injection endpoint 'adicionar_almoxarife.php' parameter 'id_almoxarifado', 'id_funcionario' in WeGIACVE-2025-26612LabRedesCefetRJ · CVSS 10 · 0.6% likely

    CWE-89

26. WeGIA vulnerable to SQL Injection (Blind Time-Based) in `processa_deletar_socio.php` parameter `id_socio`CVE-2025-53823LabRedesCefetRJ · CVSS 10 · 0.6% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.