Vulnerabilities

YesWiki before 4.6.7 contains a second-order SQL injection vulnerability in AclService::updateRequestWithACL, where a stored username is concatenated…

YesWiki before 4.6.7 contains a second-order SQL injection vulnerability in AclService::updateRequestWithACL, where a stored username is concatenated unescaped into a read-ACL LIKE clause. Attackers can self-register an account name containing a double-quote payload, then load non-admin ACL-filtered listings to read database contents and bypass read ACLs.

Read at NIST National Vulnerability Database (CVE API 2.0)

CVSS

7.6

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-104456 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 10
   CVE NVD 29d ago

   YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar nuagetag action, which concatenates the unescaped tags attribute into a raw…

   CVSS 7.5 CVE-2026-104462
2. 10
   CVE NVD 29d ago

   YesWiki before 4.6.7 contains a blind SQL injection vulnerability in the {{newtextsearch}} action because Bazar list option ids are concatenated into…

   CVSS 7.5 CVE-2026-104460 Oracle
3. 21
   CVE NVD 29d ago

   YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar filtertags action, which wraps unescaped filterN attribute tokens in quotes…

   CVSS 8.6 CVE-2026-104457 Oracle