Critical · published February 18, 2025
🚨 A sneaky SQL injection lurks in WeGIA’s `familiar_docfamiliar.php` that could grant attackers unauthorized access to sensitive data! 🔥 Think of it like a restaurant that lets anyone sneak into the kitchen without a check — once inside, they can whip up any dish without a chef’s oversight! 🍽️ If exploited, an attacker could execute any SQL command, leading to unauthorized access to user data, changing records, or even deleting important information. This could be absolutely devastating for institutions relying on WeGIA to manage sensitive information securely. 😱
Think of it like a restaurant that lets anyone sneak into the kitchen without a check — once inside, they can whip up any dish without a chef’s oversight! 🍽️ This vulnerability allows attackers to inject arbitrary SQL queries through the `familiar_docfamiliar.php` endpoint, bypassing authentication and exposing the database to unauthorized actions.
If exploited, an attacker could execute any SQL command, leading to unauthorized access to user data, changing records, or even deleting important information. This could be absolutely devastating for institutions relying on WeGIA to manage sensitive information securely. 😱 Immediate action is crucial! Upgrade to WeGIA version 3.2.14 to close this vulnerability. Since there are no known workarounds, don't delay — securing your instance is the top priority! 🛡️ You've got this! Follow these steps, and you’ll be a security hero in no time! 💪