CVE-2026-23723 PoC — WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameter

Source

https://github.com/Ch35h1r3c47/CVE-2026-23723-POC

Associated Vulnerability

Title: WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameter (CVE-2026-23723)
Description:WeGIA is a web manager for charitable institutions. Prior to 3.6.2, an authenticated SQL Injection vulnerability was identified in the Atendido_ocorrenciaControle endpoint via the id_memorando parameter. This flaw allows for full database exfiltration, exposure of sensitive PII, and potential arbitrary file reads in misconfigured environments. This vulnerability is fixed in 3.6.2.

Description

This is a lightweight Python helper script designed to automate the generation of sqlmap-compatible PoC files for the authenticated error-based SQL injection vulnerability in WeGIA (≤ 3.6.1), identified as GHSA-xfmp-2hf9-gfjp.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →