Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-116207

YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::prepareSearchRequest(). Field names from the query and searchfields parameters of the public Bazar entries search API are placed in a backtick-quoted alias escaped only with mysqli_real_escape_string. Attackers can supply a backtick to inject subqueries, reading data such as user password hashes or exhausting database threads with SLEEP().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

YesWiki yeswiki

Default version status: unaffected

  • 4.6.0 to < 4.7.0affected
  • 4.7.0unaffected

YesWiki yeswiki

Default version status: unaffected

  • 5.0.0-alpha1 to < 5.0.0-alpha4affected
  • 5.0.0-alpha4unaffected

References