CVE-2025-55169 PoC — WeGIA 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55169.yaml

Associated Vulnerability

Title:WeGIA 路径遍历漏洞 (CVE-2025-55169)
Description:WeGIA是Nilson Lazarin个人开发者的一个福利机构的网络管理器。 WeGIA 3.4.8之前版本存在路径遍历漏洞，该漏洞源于/html/socio/sistema/download_remessa.php端点存在路径遍历，可能导致本地文件泄露。

Description

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a path traversal vulnerability was discovered in the WeGIA application, html/socio/sistema/download_remessa.php endpoint. This vulnerability could allow an attacker to gain unauthorized access to local files in the server and sensitive information stored in config.php. config.php contains information that could allow direct access to the database. This issue has been patched in version 3.4.8.

File Snapshot


 id: CVE-2025-55169

info:
  name: WeGIA - Directory Traversal
  author: praivesi
  severity: critica

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!