CVE-2026-55682— WeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.php
一分钟漏洞结论
影响对象
LabRedesCefetRJ WeGIA
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the auto-prepended web/html/seguranca/sessionStart.php reflects an attacker-supplied PHPSESSID cookie in a Set-Cookie response and uses DB_HOST as the cookie domain. If a victim authenticates
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-55682 基础信息
漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
WeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.php
来源: CVE Program / CVE List V5
Vulnerability Description
WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the auto-prepended web/html/seguranca/sessionStart.php reflects an attacker-supplied PHPSESSID cookie in a Set-Cookie response and uses DB_HOST as the cookie domain. If a victim authenticates while using the attacker-selected identifier, the attacker can reuse that identifier to hijack the authenticated session. The response also discloses the internal database host name through the cookie Domain attribute, and the vulnerable session handler affects all PHP pages. This issue is fixed in version 3.8.6.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
来源: CVE Program / CVE List V5
Vulnerability Type
信息暴露
来源: CVE Program / CVE List V5
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| LabRedesCefetRJ | WeGIA | < 3.8.6 | - |
|
二、漏洞 CVE-2026-55682 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-55682 的情报信息
请登录查看更多情报信息。
CVE-2026-55682 补丁与修复 (2)
-
issue #221 concluida · LabRedesCefetRJ/WeGIA@f59cad3 · GitHub x_refsource_MISC
CVE-2026-55682 其他参考 (3)
-
Release 3.8.6 · LabRedesCefetRJ/WeGIA · GitHub x_refsource_MISC
同批安全公告 · LabRedesCefetRJ · 2026-10-14 · 共 6 条
| CVE-2026-55683 | 9.8 CRITICAL | WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php |
| CVE-2026-55684 | 9.8 CRITICAL | WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php |
| CVE-2026-55680 | 9.8 CRITICAL | WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter |
| CVE-2026-55681 | 8.8 HIGH | WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parame |
| CVE-2026-55679 | 6.5 MEDIUM | WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code |
IV. Related Vulnerabilities
Same product: WeGIA
-
CVE-2026-55684
WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca -
CVE-2026-55681
WeGIA: SQL Injection in html/matPat/restaurar_produto_desocu -
CVE-2026-55679
WeGIA: Pre-auth Installer Injection Chain Enables Command Ex -
CVE-2026-55680
WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.ph -
CVE-2026-55683
WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca
Same vendor: LabRedesCefetRJ
-
CVE-2026-55684
WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca -
CVE-2026-55681
WeGIA: SQL Injection in html/matPat/restaurar_produto_desocu -
CVE-2026-55679
WeGIA: Pre-auth Installer Injection Chain Enables Command Ex -
CVE-2026-55680
WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.ph -
CVE-2026-55683
WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca
Same weakness: CWE-200
-
CVE-2026-110855
GitPython before 3.2.0 Environment Variable Disclosure via . -
CVE-2026-110696
itsmeravitejak Online-Examination-System dbtables.sql inform -
CVE-2026-104110
FileRise: Unauthenticated disclosure of internal folder path -
CVE-2026-64856
FileRise: Missing Authentication Guard on File Snippet Previ -
CVE-2026-110777
Evolution-data-server: local file disclosure via attach file
V. Comments for CVE-2026-55682
暂无评论