Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file `html/socio/sistema/deletar_tag.php` uses `extract($_REQUEST)` on line 14 and directly concatenates the `$id_tag` variable into SQL queries on lines 16-17 without prepared statements or sanitization. Version 3.6.7 patches the vulnerability.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-27 | 2 | Disclosure1Patch1 |
| 2026-03-28 | 1 | Patch1 |
CVE-2026-33991 WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file `html/socio/sistema/deletar_tag.php` uses `extract($_REQUEST)` on line 14 and dir… https://www.cve.org/CVERecord?id=CVE-2026-33991
Post summary
CVE‑2026‑33991 surfaces an insecure use of PHP’s `extract($_REQUEST)` in WeGIA before v3.6.7, which is presumably fixed in that version.
🟠 CVE-2026-33991 - High WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file `html/socio/sistema/deletar_tag.php` uses `extract($_REQUEST)` on line 14 and directly concatenates the `$... https://www.thehackerwire.com/vulnerability/CVE-2026-33991/ https://t.co/sU1T6YhChx
Post summary
The tweet announces CVE‑2026‑33991, highlighting a security flaw involving unsanitized user input via `extract($_REQUEST)` and direct string concatenation, but does not provide PoC, exploit code, or patch details.
[CVE-2026-33991: HIGH] Update to WeGIA version 3.6.7 for improved cyber security. Prior versions risk SQL injection due to unsanitized user input in `deletar_tag.php`.#cve,CVE-2026-33991,#cybersecurity https://cvefind.com/CVE-2026-33991
Post summary
The post reveals a SQL injection flaw in WeGIA's `deletar_tag.php` and advises users to upgrade to version 3.6.7 for remediation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wegia | wegia | - | - | - |