WeGIA 在 `listar_memorandos_ativos.php` 中存在反射型跨站脚本攻击 (XSS)，通过 `sccd` 参数

攻击者可以利用此XSS漏洞在受影响的WeGIA系统中执行任意JavaScript代码。这可能导致攻击者窃取用户会话cookie，冒充用户执行操作，篡改网页内容，甚至劫持整个应用程序。攻击者可以通过构造恶意的URL，诱骗用户点击，从而触发该漏洞。由于WeGIA通常用于管理敏感的慈善捐款和用户信息，因此该漏洞可能导致严重的财务损失和声誉损害。

Charitable institutions using WeGIA versions 3.6.6 and earlier are at significant risk. Organizations relying on WeGIA for managing donor information or beneficiary data are particularly vulnerable, as a successful XSS attack could lead to data breaches and reputational damage. Shared hosting environments where multiple websites share the same server resources may also be affected if one website is compromised.

• php: Examine access logs for requests to /html/memorando/listarmemorandosativos.php containing unusual or obfuscated characters in the sccd GET parameter.

grep 'sccd=[a-zA-Z0-9><"\;]+' /var/log/apache2/access.log

• generic web: Use curl to test the endpoint with a simple XSS payload and observe the response.

curl 'http://wegia-server/html/memorando/listar_memorandos_ativos.php?sccd=<script>alert("XSS")</script>' 

• generic web: Check response headers for missing or incorrect Content-Security-Policy (CSP) directives, which could allow XSS attacks to succeed.

1. 2026-03-20Disclosure

   disclosure

1. 已保留2026-03-17
2. 发布日期2026-03-20
3. EPSS 更新日期2026-03-27

最有效的缓解措施是立即将WeGIA升级至3.6.7版本或更高版本。如果无法立即升级，可以尝试以下临时缓解措施：严格审查所有输入数据，特别是来自URL的GET参数，并进行适当的输入验证和输出编码。配置Web应用程序防火墙（WAF）以检测和阻止XSS攻击。禁用或限制对listarmemorandosativos.php的访问，除非绝对必要。在服务器端实施内容安全策略（CSP）以限制浏览器可以加载的资源。