{"id":"CVE-2026-55683","published":"2026-10-14T20:17:50.640","lastModified":"2026-10-15T16:18:16.743","description":"WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobranca.php endpoint accepts POST input through extract($_REQUEST) and directly incorporates valor, valor_pago, id_pessoa, id_socio, and id_sociotipo into UPDATE, INSERT, and SELECT statements without prepared statements. A remote attacker can use the affected parameters to execute arbitrary SQL that reads or modifies WeGIA database content, including billing records and credential data. The same SQL access can delete or truncate tables, causing loss of application data. This issue is fixed in version 3.8.6.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://github.com/LabRedesCefetRJ/WeGIA/commit/f819be361f984592c4b5a35db830495b4e2263fa","tags":[]},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/issues/184","tags":[]},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/pull/1705","tags":[]},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.8.6","tags":[]},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-vjxh-wcf9-4qgq","tags":[]},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-vjxh-wcf9-4qgq","tags":[]}],"exploitRefs":[{"url":"https://github.com/LabRedesCefetRJ/WeGIA/commit/f819be361f984592c4b5a35db830495b4e2263fa","tags":[]},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/issues/184","tags":[]},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/pull/1705","tags":[]},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.8.6","tags":[]},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-vjxh-wcf9-4qgq","tags":[]},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-vjxh-wcf9-4qgq","tags":[]}],"hasPoc":true,"ai":{"summary":"WeGIA web manager contains a SQL injection vulnerability in its billing management endpoint that allows unauthenticated attackers to execute arbitrary SQL commands on the database, potentially accessing or modifying sensitive data including billing records and user credentials.","exploitability":"The vulnerability is highly exploitable with no authentication required, as it directly incorporates user input into SQL queries without prepared statements, allowing attackers to perform full database read/write operations with minimal effort.","blast_radius":"Exploitation could lead to complete compromise of charitable institution data including financial records, user credentials, and potentially allow attackers to delete or truncate critical application tables, causing significant operational disruption.","remediation":"Upgrade to version 3.8.6 immediately to address the SQL injection vulnerability in the cadastro_cobranca.php endpoint.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["sql-injection","web","database","unauthenticated"],"model":"garnet-coder","analyzedAt":"2026-10-15T08:52:54.070Z"}}