CVE-2025-59939 | LabRedesCefetRJ WeGIA up to 3.4.x control.php id_produto sql injection (GHSA-jx9m-pgf8-v489)

September 27, 2025 Yanac

A vulnerability classified as critical has been found in LabRedesCefetRJ WeGIA up to 3.4.x. The impacted element is an unknown function of the file control.php. Performing manipulation of the argument id_produto results in sql injection.

This vulnerability is reported as CVE-2025-59939. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More