{"id":"CVE-2026-55680","revision":"58dfd5ba06074af0b1d5d7c84246f80c","records":[{"revision":"58dfd5ba06074af0b1d5d7c84246f80c","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-55680","aliases":[],"title":"WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via \"codigo\" parameter","description":"WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/socio/sistema/cadastro_cobranca.php can place a quoted SQL expression in the codigo parameter, which extract($_REQUEST) passes into the WHERE codigo= clause of an UPDATE statement without validation or parameter binding. Quoting the value bypasses MariaDB type conversion for the VARCHAR column and permits arbitrary SQL execution without a session. An attacker can read or modify database content, including user credential hashes and billing records in the cobrancas table. This issue is fixed in version 3.8.6.","state":0,"publishedAt":"2026-10-14T19:42:22.402+00:00","modifiedAt":"2026-10-15T15:05:34.259+00:00","affected":[{"ecosystem":"Vendor product","name":"WeGIA","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"LabRedesCefetRJ\",\n                    \"product\": \"WeGIA\",\n                    \"versions\": [\n                        {\n                            \"version\": \"< 3.8.6\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8,"severity":"CRITICAL"}],"references":["https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-fxcc-q2j6-w2rf","https://github.com/LabRedesCefetRJ/WeGIA/issues/184","https://github.com/LabRedesCefetRJ/WeGIA/pull/1705","https://github.com/LabRedesCefetRJ/WeGIA/commit/f819be361f984592c4b5a35db830495b4e2263fa","https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.8.6"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-55680","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-55680","identifiers":["CVE-2026-55680"]},"retained":false,"historicalAffected":[]}],"coverage":[]}