{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-33134", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-03-17T20:35:49.928Z", "datePublished": "2026-03-20T10:35:43.400Z", "dateUpdated": "2026-03-20T10:35:43.400Z"}, "containers": {"cna": {"title": "WeGIA has Authenticated Time-Based Blind SQL Injection in `restaurar_produto.php` via `id_produto` parameter", "problemTypes": [{"descriptions": [{"cweId": "CWE-89", "lang": "en", "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-qg95-x997-66wq", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-qg95-x997-66wq"}, {"name": "https://github.com/LabRedesCefetRJ/WeGIA/pull/1457", "tags": ["x_refsource_MISC"], "url": "https://github.com/LabRedesCefetRJ/WeGIA/pull/1457"}, {"name": "https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.6.6", "tags": ["x_refsource_MISC"], "url": "https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.6.6"}], "affected": [{"vendor": "LabRedesCefetRJ", "product": "WeGIA", "versions": [{"version": "< 3.6.6", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-20T10:35:43.400Z"}, "descriptions": [{"lang": "en", "value": "WeGIA is a web manager for charitable institutions. Versions 3.6.5 and below contain an authenticated SQL Injection vulnerability in the html/matPat/restaurar_produto.php endpoint. The vulnerability allows an authenticated attacker to inject arbitrary SQL commands via the id_produto GET parameter, leading to full database compromise. In the script /html/matPat/restaurar_produto.php, the application retrieves the id_produto parameter directly from the $_GET global array and interpolates it directly into two SQL query strings without any sanitization, type-casting (e.g., (int)), or using parameterized (prepare/execute) statements. This issue has been fixed in version 3.6.6."}], "source": {"advisory": "GHSA-qg95-x997-66wq", "discovery": "UNKNOWN"}}}}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "WeGIA is a web manager for charitable institutions. Versions 3.6.5 and below contain an authenticated SQL Injection vulnerability in the html/matPat/restaurar_produto.php endpoint. The vulnerability allows an authenticated attacker to inject arbitrary SQL commands via the id_produto GET parameter, leading to full database compromise. In the script /html/matPat/restaurar_produto.php, the application retrieves the id_produto parameter directly from the $_GET global array and interpolates it directly into two SQL query strings without any sanitization, type-casting (e.g., (int)), or using parameterized (prepare/execute) statements. This issue has been fixed in version 3.6.6."}], "id": "CVE-2026-33134", "lastModified": "2026-03-20T13:37:50.737", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.7, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2026-03-20T11:18:03.190", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/LabRedesCefetRJ/WeGIA/pull/1457"}, {"source": "security-advisories@github.com", "url": "https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.6.6"}, {"source": "security-advisories@github.com", "url": "https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-qg95-x997-66wq"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "security-advisories@github.com", "type": "Primary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-03-20T12:21:21.394534+00:00", "value": {"mitigation_remediation": ["Upgrade to WeGIA v3.6.6 or later", "Verify authentication controls to limit access to the restaurar_produto.php endpoint", "Monitor application logs for suspicious SQL activity"], "summary": {"action": "Immediate Patch", "impact": "Full Database Compromise"}, "threat_synthesis": {"affected_systems": "The affected product is WeGIA from LabRedesCefetRJ. Versions 3.6.5 and earlier are vulnerable. The patch was released in version 3.6.6.", "description_and_impact": "WeGIA, a web manager for charitable institutions, contains an authenticated time\u2011based blind SQL injection in the restaurar_produto.php script. Credentials are required to reach the endpoint, and the id_produto GET parameter is concatenated directly into two SQL statements without any sanitization or use of prepared statements. The vulnerability allows an authenticated attacker to execute arbitrary SQL commands, resulting in full compromise of the underlying database, affecting confidentiality, integrity, and potentially availability. The weakness is a classic SQL injection identified as CWE\u201189.", "risk_and_exploitability": "The CVSS score is 9.3, indicating critical severity. No EPSS value is provided, but the lack of mitigations and the necessity of authentication mean that if credentials are compromised, exploitation is highly likely. The vulnerability is not listed in CISA's KEV catalog. Attackers can directly target the authenticated endpoint; the injection is straightforward once authenticated, so the risk remains high until the product is upgraded."}}}}, "created": "2026-03-20T14:13:41.463856+00:00", "updated": "2026-03-20T14:13:41.463911+00:00", "vendors": []}