How many CVEs have patched listarAnexo?

9 published CVEs changed listarAnexo in LabRedesCefetRJ/WeGIA, in 2 distinct patches totalling 567 changed lines, between 2026 and 2026.

What is the latest CVE that changed listarAnexo?

CVE-2026-23731 (WeGIA Clickjacking Vulnerability), published 2026-01-16, changed lines 32 to 59 of controle/Atendido_ocorrenciaControle.php.

How does listarAnexo compare to the rest of LabRedesCefetRJ/WeGIA?

LabRedesCefetRJ/WeGIA has 82 CVEs with a located fix in total; 9 of them changed listarAnexo.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

listarAnexo in LabRedesCefetRJ/WeGIA: Patched by 9 CVEs

WeGIA Clickjacking Vulnerability

CVE-2026-23731 · controle/Atendido_ocorrenciaControle.php · lines 32–59 · +24 −8

Medium · CVSS 4.3

EPSS 0.3%2026-01-16

WeGIA Clickjacking Vulnerability

CVE-2026-23731 · dao/Atendido_ocorrenciaDAO.php · lines 139–165 · +16 −15

Medium · CVSS 4.3

EPSS 0.3%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=ProdutoControle)

CVE-2026-23730 · controle/Atendido_ocorrenciaControle.php · lines 32–59 · +24 −8

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=ProdutoControle)

CVE-2026-23730 · dao/Atendido_ocorrenciaDAO.php · lines 139–165 · +16 −15

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle)

CVE-2026-23729 · controle/Atendido_ocorrenciaControle.php · lines 32–59 · +24 −8

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarDescricao, nomeClasse=ProdutoControle)

CVE-2026-23729 · dao/Atendido_ocorrenciaDAO.php · lines 139–165 · +16 −15

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle)

CVE-2026-23728 · controle/Atendido_ocorrenciaControle.php · lines 32–59 · +24 −8

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=DestinoControle)

CVE-2026-23728 · dao/Atendido_ocorrenciaDAO.php · lines 139–165 · +16 −15

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle)

CVE-2026-23727 · controle/Atendido_ocorrenciaControle.php · lines 32–59 · +24 −8

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoSaidaControle)

CVE-2026-23727 · dao/Atendido_ocorrenciaDAO.php · lines 139–165 · +16 −15

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle)

CVE-2026-23726 · controle/Atendido_ocorrenciaControle.php · lines 32–59 · +24 −8

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA has an Open Redirect Vulnerability in control.php Endpoint via nextPage Parameter (metodo=listarTodos, nomeClasse=TipoEntradaControle)

CVE-2026-23726 · dao/Atendido_ocorrenciaDAO.php · lines 139–165 · +16 −15

Medium · CVSS 4.8

EPSS 0.2%2026-01-16

WeGIA Stored Cross-Site Scripting (XSS) – nome Parameter on Adopters Information Page

CVE-2026-23725 · controle/Atendido_ocorrenciaControle.php · lines 32–59 · +24 −8

Medium · CVSS 5.3

EPSS 0.2%2026-01-16

WeGIA Stored Cross-Site Scripting (XSS) – nome Parameter on Adopters Information Page

CVE-2026-23725 · dao/Atendido_ocorrenciaDAO.php · lines 139–165 · +16 −15

Medium · CVSS 5.3

EPSS 0.2%2026-01-16

WeGIA Stored Cross-Site Scripting (XSS) – atendido_idatendido Parameter on Occurrence Registration Page

CVE-2026-23724 · controle/Atendido_ocorrenciaControle.php · lines 32–59 · +24 −8

Medium · CVSS 5.4

EPSS 0.2%2026-01-16

WeGIA Stored Cross-Site Scripting (XSS) – atendido_idatendido Parameter on Occurrence Registration Page

CVE-2026-23724 · dao/Atendido_ocorrenciaDAO.php · lines 139–165 · +16 −15

Medium · CVSS 5.4

EPSS 0.2%2026-01-16

WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameter

CVE-2026-23723 · controle/Atendido_ocorrenciaControle.php · lines 32–59 · +24 −8

High · CVSS 7.2

EPSS 0.4%2026-01-16

WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameter

CVE-2026-23723 · dao/Atendido_ocorrenciaDAO.php · lines 139–165 · +16 −15

High · CVSS 7.2

EPSS 0.4%2026-01-16

listarAnexo

Overview

CVEs that patched it

Other functions in these files

Other hotspots in the repository

Frequently asked questions

References

Track LabRedesCefetRJ/WeGIA CVEs