Beveiligingsadvies

CVE-2026-33133

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-20 10:31:38

Laatst bijgewerkt 2026-03-24 01:59:18

Toegewezen door GitHub_M

CVSS-score 8.6

Status PUBLISHED

Beschrijving

WeGIA is a web manager for charitable institutions. In versions 3.6.5 and 3.6.6, the loadBackupDB() function imports SQL files from uploaded backup archives without any content validation. An attacker can craft a backup archive containing arbitrary SQL statements that create rogue administrator accounts, modify existing passwords, or execute any database operation. This was introduced in commit 370104c. This issue was patched in version 3.6.7.

← Alle CVE's bekijken Bekijk op cve.org ↗