WeGIA SQL Injection Vulnerability in query_geracao_auto.php

A SQL injection vulnerability exists in WeGIA versions prior to 3.2.0, specifically in the query_geracao_auto.php file. The vulnerability allows attackers to manipulate the query parameter and execute arbitrary SQL commands, potentially compromising the database's confidentiality, integrity, and availability.

Impact

Exploitation of this vulnerability allows for SQL injection, enabling the execution of arbitrary SQL commands. This could lead to unauthorized data access, data manipulation, or in some cases, executing commands on the server if the database user has sufficient privileges.

Reproduction

To reproduce this vulnerability, send a POST request to the WeGIA endpoint '/WeGIA/html/socio/sistema/controller/query_geracao_auto.php' with a crafted 'query' parameter. The payload can include SQL commands, such as 'SELECT @@version_compile_os AS Sistema_Operacional', to demonstrate the injection by retrieving database information.