WeGIA allows SQL Injection in html/funcionario/profile_funcionario.php (id_funcionario parameter)

The SQL Injection vulnerability in WeGIA's /html/funcionario/profile_funcionario.php endpoint poses a significant risk. An attacker can exploit this flaw to bypass authentication and directly manipulate the database. This could result in the exfiltration of sensitive data such as donor information, financial records, and user credentials. Furthermore, an attacker might be able to modify or delete data, disrupt operations, or even gain control of the entire system. The lack of authentication required to exploit the vulnerability amplifies the potential impact, as any external user can attempt to leverage it.

Charitable institutions and organizations utilizing WeGIA for web management are at significant risk. Specifically, those running older versions (≤ 3.4.3) and those with limited security expertise or resources are particularly vulnerable. Shared hosting environments where WeGIA is installed alongside other applications may also be at increased risk due to potential cross-site contamination.

• php: Examine web server access logs for requests to /html/funcionario/profilefuncionario.php with unusual or malformed idfuncionario parameters. Look for patterns indicative of SQL injection attempts (e.g., ' OR 1=1 --). • php: Use a code analysis tool to scan the /html/funcionario/profilefuncionario.php file for instances where the idfuncionario parameter is used directly in SQL queries without proper sanitization. • generic web: Monitor network traffic for suspicious SQL queries originating from the WeGIA server. • generic web: Check for unusual database activity, such as unexpected data modifications or large data exports.

1. 2025-07-07Disclosure

   disclosure

1. Reserviert2025-07-02
2. Veröffentlicht2025-07-07
3. EPSS aktualisiert2026-03-23

The primary mitigation for CVE-2025-53529 is to immediately upgrade WeGIA to version 3.4.3 or later. If upgrading is not immediately feasible, consider implementing a Web Application Firewall (WAF) rule to filter malicious SQL injection attempts targeting the /html/funcionario/profilefuncionario.php endpoint, specifically focusing on the idfuncionario parameter. Input validation on the server-side, even as a temporary measure, can help prevent malicious SQL commands from being executed. After upgrading, confirm the vulnerability is resolved by attempting a SQL injection attack on the /html/funcionario/profile_funcionario.php endpoint with a known malicious payload.