PRODUCT PROFILE

WeGIA

Created from vulnerability 18117 relation agent

关联漏洞

共找到 2 条公开漏洞记录

严重CVE-2026-284112026/09/30

WeGIA < 3.6.5 - Unauthenticated Authentication Bypass via extract()

WeGIA < 3.6.5 contains an authentication bypass caused by unsafe use of extract() on $_REQUEST, letting unauthenticated attackers bypass authentication and access protected areas, exploit requires no authentication.

WeGIAPoC 已收录

CVSS—

严重CVE-2026-284092026/06/25

WeGIA <= 3.6.4 - Remote Code Execution

WeGIA <= 3.6.5 contains a remote code execution caused by improper validation of backup file names in the database restoration functionality, letting attackers with administrative access execute arbitrary OS commands

WeGIAPoC 已收录

CVSS—